Operational Risk Specialist II - Data Risk

At Early Warning, we've powered and protected the U.S. financial system for over thirty years with cutting-edge solutions like Zelle , Paze , and so much more. As a trusted name in payments, we partner with thousands of institutions to increase access to financial services and protect transactions for hundreds of millions of consumers and small businesses.

Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment.

Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

Overall Purpose

The Operational Risk Specialist II supports second-line operational risk activities through risk assessments, control testing, monitoring, reporting, and advisory support. The role helps identify, evaluate, and communicate risks; monitor remediation; and promote compliance with established policies, standards, regulatory requirements, and risk appetite.

The position may focus on one of the following areas:
Artificial Intelligence Risk Management, Data Risk Management, or Third-Party Risk Management.

This position helps ensure operational risks are managed in accordance with established policies, standards, procedures, contractual requirements, regulatory expectations, and the organization's risk appetite.

Essential Functions

• Execute operational risk assessments, control evaluations, due diligence reviews, testing, monitoring, and quality assurance activities in accordance with established policies, standards, and methodologies.
• Identify and evaluate risks, control gaps, emerging issues, and remediation needs; document conclusions and recommend appropriate actions.
• Provide independent review and challenge of risk assessments, controls, findings, mitigation plans, and risk acceptance decisions.
• Maintain accurate records of risks, controls, assessments, testing, issues, findings, and remediation activities in applicable systems and repositories.
• Monitor corrective actions, analyze trends and root causes, and escalate material concerns or risks outside established tolerances.
• Support audits, regulatory reviews, customer assessments, management self-assessments, and risk and control self-assessments.
• Develop and monitor risk metrics, dashboards, and reporting for management, governance forums, and other stakeholders.
• Provide guidance to business partners on risk requirements, documentation standards, control expectations, and remediation activities.
• Coordinate with first- and second-line stakeholders to resolve issues, clarify requirements, and support consistent execution of risk processes.
• Identify opportunities to improve the effectiveness, efficiency, and consistency of operational risk practices.
• Support the protection, confidentiality, integrity, and availability of systems, data, and information assets.

Area of Focus

Data Risk Management

• Conduct data risk assessments and provide data-related requirements for stakeholder impact assessments.
• Evaluate risks associated with data governance, data integrity, information classification, data protection, and policy compliance.
• Support the development, maintenance, and enforcement of data risk policies, standards, procedures, and guidelines.
• Manage information classification activities, including intake review, documentation preparation, risk statement development, stakeholder review, approval, distribution, and inventory maintenance.
• Design, execute, and report on internal control testing related to data risk and data integrity.
• Identify data control gaps, document issues, monitor remediation, and conduct root cause analysis.
• Prepare Data Risk and Data Integrity reporting, including metrics, dashboards, testing results, and management materials.
• Support applicable data management, information security, privacy, regulatory, and assurance requirements.

Minimum Qualifications

• Bachelor's degree or equivalent combination of education and relevant professional experience.
• Typically, has 2 or more years of experience in a risk management function.
• Experience in operational risk, data risk, artificial intelligence risk, compliance, audit, information security, data management, technology risk, third-party risk, or a related discipline.
• Experience conducting or supporting risk assessments, control testing, due diligence, audit activities, issue management, or risk reporting.
• Working knowledge of operational risk management concepts, internal controls, and the three-lines model.
• Ability to collect and analyze information, identify risk or control gaps, document conclusions, and recommend appropriate actions.
• Ability to interpret policies, standards, procedures, contractual requirements, audit criteria, or regulatory guidance.
• Strong written and verbal communication skills, including the ability to present findings and explain risk requirements to technical and nontechnical…