Conduct risk and control assessments with business partners to identify operational risks, evaluate control effectiveness, and assess residual risk exposures. 

Plan and perform independent testing of key business controls using established methodologies to assess control design and operating effectiveness. 

Identify control weaknesses and operational risk issues and coordinate remediation efforts with business stakeholders to ensure timely resolution. 

Monitor and oversee issue management activities, including tracking corrective action plans, validating remediation activities, and escalating concerns when appropriate. 

Support the Business Continuity Management program by coordinating Business Impact Assessments, maintaining continuity planning documentation, and facilitating periodic reviews with business units. 

Prepare operational risk reporting, key risk metrics, and management information for committees and senior management stakeholders. 

Maintain operational risk inventories, including risk, control, and issue information, ensuring records remain accurate and current. 

Provide guidance to business units regarding operational risk management practices, control design, and risk mitigation strategies. 

Contribute to the development, maintenance, and enhancement of operational risk management policies, standards, procedures, and supporting documentation. 

Build and maintain effective working relationships with stakeholders across operational, compliance, risk, technology, and business functions to support risk management objectives. 

Support broader enterprise risk management programs and initiatives, including areas such as technology risk, cybersecurity risk, and third-party risk management. 

University degree or college diploma in Business, Finance, Risk Management, Accounting, Economics, Commerce, or a related discipline required. 

Professional certifications such as CRISC, CIA, CBCP, CISA, CRM, or equivalent are considered an asset. 

5-7 years of total professional experience within risk management, operational risk, internal audit, compliance, business continuity, controls assessment, or a related field.  

Resolver, Archer or other GRC system is considered an asset.  

Strong analytical and problem-solving capabilities with the ability to interpret qualitative and quantitative information. 

Ability to evaluate risks, identify root causes, and develop practical recommendations. 

Strong organizational and project management skills with the ability to manage multiple priorities and deadlines. 

Strong written and verbal communication skills. 

Ability to prepare concise and meaningful reporting for business and risk stakeholders. 

Collaborative relationship-building skills and ability to influence stakeholders without direct authority. 

Demonstrates sound judgment, attention to detail, initiative, and accountability. 

Communication skills required: 

Moderately complex communication involving facilitation of meetings, presentation of assessment results, preparation of reports, provision of advisory guidance, and interaction with stakeholders across multiple business areas.