Job Description:

The position of Operational Risk and Advisory Specialist is within the Operational Risk Function, a critical component of the second line of defense. This role is responsible for providing comprehensive oversight of operational risk activities, with a strong emphasis on new technologies, information security, and cyber risks. The Operational Risk function engages in advisory, risk assessment, analysis, and reporting to the Bank’s governing bodies.

Responsibilities:

• Enhance the risk management framework in relation to risk assessment and advisory, particularly in relation to new technologies, information security and cyber risks.
• Collaborate with business units to integrate advanced risk management practices into their operations.
• Conduct ad hoc risk assessments and analyses, especially concerning information security and cyber threats, to identify potential issues and propose efficient mitigating measures.
• Perform incident analysis to determine root causes, identify mitigating actions, and ensure follow-up.
• Provide advisory support to Business Units, including reviewing the Internal Control Framework with a focus IT and Information Security in the way they support the sustainable business development of the Bank
• Offer expert advice on risk mitigation strategies, particularly related to information security and emerging technologies.
• Report and present risk assessment results to the Risk Control leadership group and other relevant stakeholders, with a focus on cyber risk and technological vulnerabilities.
• Prepare detailed risk reports and presentations for executive review.
• Actively participate in deploying new digital solutions to support the implementation of the internal control system globally, ensuring these solutions address information security and cyber risk concerns.

Qualifications:

• University degree in business administration, economics, science, information security, or a related field.
• 10 years of working experience, including consulting or audit at a leading professional services firm and/or in a comparable position at a market-leading bank.
• Strong understanding of core banking systems, end-to-end transaction processing, and cybersecurity principles.
• Proven ability to write reports and communicate effectively with a senior audience.
• Excellent analytical skills and a structured approach to problem-solving and reporting.
• Exceptional communication skills in English, both written and spoken.
• Capacity to work autonomously and as part of a global team in a fast-paced environment.
• Experience with new technologies and a deep understanding of information security and cyber risk management.