Your role will be organized along 3 main axes:
Lisbon RISK ORM Network Functions and Transversal Activities (TA)
You will act as key stakeholder in the build-up of RISK ORM Network Functions and TA locally and actively contribute to the implementation of the Operational Risk Management Framework based on local risk identification, in close cooperation with RISK ORM Network Functions and TA Paris team.
Senior Operational Risk Officer
As 2nd line of defense on your perimeter of supervision – which comprises all activities managed locally by Group Functions (Hubs), notably Compliance, Finance and Strategy, ITG Fresh, Performance & Procurement, Group Data Office – you will contribute to the deployment of the operational risk management system of this perimeter. You will notably:
- Help to drive change by participating in the implementation of major transformation programmes, in particular when they are linked to a recommendation from the Supervisor or to compliance with a regulatory provision (e.g. project to monitor the execution and results of controls, Third Party Risk Management, Operational resilience)
- Ensure that regulations, standards, guidelines and methodologies relating to operational risk are understood and implemented over time within his business area/unit/perimeter (e.g. Risk and Control Self Assessment [RCSA], check & challenge incidents, etc.)
- Perform second-level checks
- Conduct independent analyses
- Anchor the use of the Group’s operational risk management tools and associated reporting systems
- implement the operational risk decisions taken by the Head of OROs Functions & TA and the Head of RISK ORM Network
- Ensure that information is fed back and passed on in line with the issues at stake
- Take part in crisis management following an operational incident
Within the framework of associated governance and reporting (e.g. Internal Control Committee attended by the Head of the concerned entities under supervision; OR&C Report for the supervised activities and the related Group Functions), you will contribute to drawing up an overview of the operational risk profile of the Group Functions, including technological risks, for the attention of the local Heads of the Group Functions, the head of Territory , the ORO of the Group function concerned, the Heads of ORO Functions & TA and RISK ORM Network.
On the basis of second-level controls and independent analyses carried out by the second line of defense (2LoD), you will assess the robustness of the system put in place by the first line of defense (organization, procedural corpus, identification of processes and associated risks, robustness of the control framework put in place, management of incidents, permanent control actions, recommendations from the Inspection Générale, handling of exemptions, etc.), which may lead to permanent control actions where appropriate.
You will provide qualitative and quantitative monitoring of historical incidents, including analysis of the most significant incidents and supervision of the associated action plans.
You will help strengthening the 2LoD against technological risks, given the growing role of technology in the Group’s operational processes, and the need to ensure that technological risks, as operational risks, are effectively covered. In close relation with the Group Function ICT Expert, you will notably:
- Ensure that the governance of operational risk management includes technological risks.
- Develop supervision of the identification and assessment of technological risks by the first line of defense
- Continuously improve supervision of the collection of technological incidents, ensuring that they are properly documented and entered in the corresponding tools.
- Contribute to the implementation of second-level controls on technological risk.
- Contribute to the development of technological communities (Cyber, etc.).
Transversal analysis
As a member of RISK ORM Network Functions and TA team, you will contribute to transversal activities and projects if and when required.
You will report functionally to the Global head of RISK ORM Network Functions & Transversal Activities (based in Paris) and locally to the Head of local RISK ORM Network.
In the context of increasing transfer of Group Functions activities to Iberian regional hubs (Lisbon, Madrid), RISK ORM Network Functions & TA is extending its local presence with the objective to both supervise local processes and contribute to transversal risk analysis. The role is based in Lisbon (exact location to be defined) with regular visits in Madrid and Paris.
And after ?
Integrated within the RISK ORM Iberian Centre of Excellence, this role will allow you to contribute to Group 2LoD framework strengthening. You will have a complete and operational vision how operate a Group Function. You will interact with the relevant Group Function Management as well as Risk ORM Management.
And you ?
You can justify of a previous experience of 10 years minimum on a similar role or in an internal control capacity (Operational Permanent Controller, Internal Audit / Inspection Générale) or in Operations environment. You can structure and conduct an audit, you have knowledge about regulatory banking organization and you have IT knowledge.
You have an excellent knowledge of operational processes, and you speak fluently English. French, Spanish and/or Portuguese proficiency is a plus.
Autonomy, rigor and strong communication & organizational skills are key to be successful in this role. In addition, you should have demonstrated flexibility, adaptation to change and client-oriented mind from previous experiences.