ERM/Operational Risk Specialist

About the role

The ERM/Operational Risk Specialist will implement and continuously operate the client’s Operational Risk Management Framework across all business units, ensuring risks stay within the defined risk appetite.

Key responsibilities

• Execute operational risk procedures, facilitate end‑to‑end risk lifecycle, and maintain the enterprise risk register.
• Plan, facilitate and document RCSA workshops, challenge risk assessments, and ensure consistent scoring methodology.
• Develop and monitor KRIs, define thresholds, and produce periodic KRI reporting.
• Prepare risk reports for executive management, ExCom, GARC and the Board, and escalate significant risks.
• Coordinate operational risk event reporting, conduct root‑cause analysis and embed lessons learned.
• Support business units with practical risk treatments and advise on risk implications of new initiatives.
• Recommend enhancements to risk methodologies, templates and reporting, and contribute to risk culture initiatives.

Required profile

• 5–8 years of experience in operational risk, enterprise risk management, internal audit or governance.
• Proven experience facilitating RCSA workshops and maintaining risk registers.
• Experience designing KRIs and preparing board‑level risk reports.
• Knowledge of ISO 31000 or COSO ERM frameworks; financial services background preferred.
• Strong analytical judgement, stakeholder management and high attention to detail.

Required skills

• Enterprise Risk Management
• Operational Risk Management
• Risk & Control Self‑Assessments (RCSA)
• Risk Registers
• Risk & Control Matrices (RCM)
• Key Risk Indicators (KRIs)
• Root Cause Analysis
• Control Effectiveness Assessment
• Risk Reporting
• Microsoft Excel
• Power BI