Operational Risk Business Oversight Manager I - Technology
Operational Risk Management (ORM) is responsible for providing independent and objective oversight of the management of risks arising from City National Bank's business processes, people, systems or external events. The Operational Risk Business Oversight (ORBO) team is responsible for providing advisory and oversight, with a particular focus on strengthening operational risk management efforts in the first line of defense (1LOD) to support decision-making, primarily covering CNB Technology and Innovation. The ORBO Manager 1 is responsible for challenging the quality, sufficiency, and completeness of 1LOD operational risk management practices against ORM Framework requirements for assigned coverage areas and communicating outcomes through escalation and reporting to management as necessary. This position provides an excellent opportunity to strengthen the operational risk management framework, which includes risk identification and assessment; risk measurement; risk controls; and risk monitoring and reporting to improve operational resilience.
What Will You Do?
- Review and challenge operational risk practices against CNB operational risk framework and policies, including but not limited to 1LOD output of risk identification assessments and scenario analysis, Risk and Control Self Assessments (RCSA's), Key Risk Indicators (KRI's), material existing and emerging exposures, Operational Risk Events (ORE) reporting, and issue resolution.
- Review and challenge of controls implemented. This includes providing feedback to risk and control owners and control assessment teams related to the following control management activities : control identification to match appropriate controls with identified risk exposures to lower the residual risk level; completeness and robustness of control documentation; reasonableness of control assessment approach and sample selection; consistency of design effectiveness and operating effectiveness conclusions with supporting evidence; and appropriateness of documented issues and action plans to remediate identified control failure.
- Review and challenge remediation initiatives to ensure operational risk exposures associated with known control deficiencies are addressed. This includes providing challenge throughout the Issue Management Lifecycle, which may include issue data details; root cause analysis; action plan; material issue changes; management's completion of the required and / or committed corrective actions with supporting evidence; and sustainability.
- Understand material existing and emerging risks which align with assigned business or corporate unit(s) to ensure operation within risk appetite and fair representation of the operational risk profile
- Provide advisory, oversight, and challenge to 1LOD development and implementation of business processes, procedures, and controls to adhere to operational risk governance requirements
- Credibly challenge 1LOD risk monitoring and reporting and related protocols, in conjunction with risk type teams, including metric trigger explanations and associated action plans
- Review and challenge self-identified issues and escalation in assigned coverage areas, including challenge of issue ratings, corrective action plans, due date extensions, and thematic issues in accordance with the CNB Issue Management Policy
- Influence and monitor progress of action plans to improve the risk and control environment arising from risk assessments, risk monitoring, internal and external events, and regulatory exams
- Exhibit high attention to details in identifying, aggregating, and communicating issues and control gaps to appropriate stakeholders
- Ensure work is produced and documented in alignment with quality and content requirements
- Provides clear and transparent updates on status of assignments
- Exercises independent judgment in identifying and assessing risk
- Prepares, reviews, and presents review and challenge results to ORM Leadership, including outlining the risk of deficiencies
- Ensures observations and findings are documented and escalated to appropriate leadership
- Exercises effective communication and promotes positive client relations with business line colleagues and management
- Maintains authoritative knowledge and understanding of laws and regulations, regulatory guidance, policy, and procedures for operational functions covered
- Maintain familiarity with, and technical expertise with assigned business unit(s) organizational structure, personnel, activities and products, new product development, financial performance, and risk and problem areas
- Act as an internal advisor to business and corporate units regarding the ORM framework, tools, policies, procedures, and reporting metrics
- Provides 2LOD audit and regulatory exam support
- Executes additional departmental initiatives and other duties as assigned
What Do You Need To Succeed?
Required QualificationsBachelor's Degree or equivalentMinimum 7 years of experience in the financial services industryMinimum 5 years of experience in risk management, technology risk management, compliance, or IT auditMinimum 3 years of IT control assurance experienceAdditional QualificationsBachelor's degree or higher preferably in computer science (with a concentration in info / cyber security), management information technology, accounting, auditing, and other professional qualifications such as CISA, CPA, CIA, etc.Strong business knowledge of financial servicesUnderstanding of Risk Management / Operational Risk Management and Technology Risk ManagementStrong knowledge of internal control management practices and testing methodology with proven experience in controls management design and / or executionStrong knowledge of issue management practices with proven experience in issue resolutionAbility to handle complexity and ambiguityAbility to deal effectively with conflictWell-developed influencing, analytical and problem-solving skillsMust be able to convey complex concepts in a clear and concise mannerAbility to work independently with effective time and project managementStrong interpersonal / teamwork skillsStrong communication (verbal and written), negotiation, and presentation skills requiredDemonstrated ability to think critically and facilitate change through collaborative effortAbility to work in a matrix environmentWhat's In It For You?
Compensation Starting base salary : $99,000 - $176,000 per year. Exact compensation may vary based on skills, experience, and location. This job is eligible for bonus and / or commissions.
Benefits and Perks At City National, we strive to be the best at whatever we do, including the benefits and perks we offer our colleagues including :
Comprehensive healthcare coverage, including Medical, Dental and Vision plans, available the first of the month following start dateGenerous 401(k) company matching contributionCareer Development through Tuition Reimbursement and other internal upskilling and training resourcesValued Time Away benefits including vacation, sick and volunteer timeSpecialized health and family planning benefits including fertility benefits, and cancer, diabetes and musculoskeletal support programsCareer Mobility support from a dedicated recruitment teamColleague Resource Groups to support networking and community engagementAbout Us Since day one we've always gone further than the competition to help our clients, colleagues and communities flourish. City National Bank was founded in 1954 by entrepreneurs for entrepreneurs and that legacy of integrity, community and unparalleled client relationships continues today. City National is a subsidiary of Royal Bank of Canada, one of North America's leading diversified financial services companies.
Inclusion and Equal Opportunity Employment City National Bank fosters an inclusive environment where all forms of diversity are valued and leveraged to make us a better company and employer. We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sexual orientation, gender identity, national origin, disability, veteran status or other basis protected by law. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.