Senior Business Analyst Operation Risk & Control
Senior operational risk analyst/manager in Singapore who leads a team overseeing technology operational and cyber risk: sets risk policies and governance, monitors KRIs/KRCIs, runs root-cause (T-10) analyses, and drives loss mitigation with in-business risk teams. Requires deep financial-services risk experience plus an understanding of software development and technology operations.
- Compensation
- Not disclosed
- Location
- Singapore
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 10+ years
- Category
- Business analysis
- Posted
Skills
Must have
- 10+ years relevant experience in Operational Risk, Technology Risk, IT Audit, Operational Control, Information Security or related field
- Established understanding of software design, application development, distributed systems, SDLC, and/or technology operations
- Demonstrable ability to analyze and monitor risk control issues through to resolution
- Excellent written and verbal communication skills
- Strong influencing/negotiating skills with attention to detail
- Bachelor's/University degree
Nice to have
- Financial services industry experience
- Hands-on experience in software design, application development, distributed systems, SDLC, or technology operations
- Project management experience with strong analytical skills and ability to solve complex problems in new and varied environments
- Compliance experience
- Understanding of financial regulation, operational management, vendor management and RCSA or related control processes across a global environment
- Master's degree
Full description
Senior Business Analyst Operation Risk & Control
Location - Singapore
Description
The Technology Operational Risk Grp Manager is accountable for management of complex/critical/large professional disciplinary areas. Leads and directs a team of professionals. Requires a comprehensive understanding of multiple areas within a function and how they interact to achieve the objectives of the function. Applies in-depth understanding of the business impact of technical contributions. Strong commercial awareness is a necessity. Generally accountable for delivery of a full range of services to one or more businesses/ geographic regions. Excellent communication skills required to negotiate internally, often at a senior level. Some external communication may be necessary. Accountable for the end results of an area. Exercises control over resources, policy formulation and planning. Primarily affects a sub-function. Involved in short- to medium-term planning of actions and resources for own area. Full management responsibility of a team or multiple teams, including management of people, budget and planning, to include performance evaluation, compensation, hiring, disciplinary actions and terminations and budget approval.
Responsibilities:
Establishes and oversees the application of operational risk policies, technology and tools, and governance processes to create lasting solutions for minimizing losses from failed internal processes, inadequate controls, and emerging risks.
Independently assesses risks and drive actions to address the root causes that persistently lead to operational risk losses by challenging both historical and proposed practices.
Governance and oversight may include (not limited to) technology operational risk, cyber risk for example.
Serves as an oversight function working with the In-Business OR and Independent Risk Teams
Drives Operation Risk Anticipation, Mitigation and Loss Recovery (and respective Recovery Plans)
Ensures Operation Risk Policy implementation and exception approvals
Informs Operational Risk Council on Sub-Segment Level OR related matters
Attends In Business Risk Committees
Leads- oversees the annual Key Risk Indicator (KRI) reviews
Monitors KRCIs triggers and thresholds and the analysis by the Business
Liaises with Business ORM on breaches and action steps to correct breaches
Communicates and Escalates breaches in KRCIs at the Segment Level
Works on T-10 (deep dive root cause analysis) with support of In-Business ORM and drive corrective actions