Director Operational Risk - Business Continuity and Operational Resilience

Role Overview:

Reporting to the Director Operational Risk, the Director will provide the 2nd Line of Defense (LoD) Risk Management Department Americas Division’s (RMDAD) Operational Resilience and Business Continuity risk management for the Combined U.S. Operations (CUSO) in accordance with US Regulations, Head Office policies, and industry best practices for risk management.
The Risk Management Department is the 2nd LoD and has the role of monitoring and assessing business practices in relation to the non-financial risk framework of SMBC. RMDAD implements a non-financial risk framework independent of the businesses’ risk appetite statements. The Director is responsible for supporting the 2nd Line operational resilience and business continuity risk management program across various businesses, group companies and functions of the bank and reporting results/findings to management and Head of Non-Financial Risk, as necessary.

Role Responsibilities:

•    Provide 2nd Line risk management oversight of the 1st Line resilience programs - Operational Resilience, Business Continuity Management, Technology Resilience, and Cyber Resilience programs. 
•    Provides the 2nd line review and challenge of resilience related program activities and their operational risk profile(s), including policies, controls, operating models/methodologies, risk assessments (RCSA), performance against key risk indicators (KRIs), and issue remediation plans.
•    Supports and provides management reporting and escalation of resilience related risks, issues, and risk events, and program status to senior management and committees as appropriate or required schedule.
•    Collaborates with stakeholders (business/function/entity) to increase the firms strength operational resilience and business continuity management.
•    Coordinates with 1st Line risk/resilience domains of operational risk, business continuity management, technology, cyber, and third-party management to obtain and share relevant information, reports and changes to policies, activities, processes, controls, etc. related to operational resilience risk
•    Ensure of Operational Resilience and Business Continuity programs are adequately governed, managed, and controlled bank-wide for identification and reporting of related risks
•    Supports the department head Managing Director in their primary role to effectively provide oversight of risk management policies, standards, controls, and activities across the organization for third-party risk, operational resilience, and business continuity management
•    Understands and articulates the status and impact of operational resilience, business continuity management, and third-party risk across the financial services industry business, group companies, and functions of the bank 

Qualifications and Skills

•    8 - 10 years of direct work experience within the financial services industry focused on a combination of technology risk management, business continuity management, and operational risk management 
•    Prior work experience within risk disciplines such as Operational Risk, Information Technology/Disaster Recovery risk, Cyber risk, Business Continuity Management (BIA/BCP) along working knowledge of an operational resilience framework.
•    Well-versed in relevant risk frameworks, operating models, and financial services/banking regulations (RCSA, NIST, FFIEC, SR 20-24, etc.) 
•    Prior experience in risk management operating models, governance and reporting, key risk indicators, risk appetite concepts, and metrics design and implementation, and committee reporting
•    Foundational knowledge of enterprise risk management industry practices including project management, and risk control self-assessments (RCSA) 
•    Detail oriented, with proven ability to question the status quo and apply effective challenge, as appropriate
•    Strong organizational skills, with proven ability to successfully manage multiple, concurrent priorities
•    Demonstrated ability to influence a group of diverse stakeholders
•    Ability to work effectively in a matrixed environment and across various organizational levels, where flexibility, collaboration, and adaptability are important
•    Maintain an operational risk management and regulatory compliance mindset to understand underlying risks and weaknesses to properly assist in mitigating such risks
•    Strong interpersonal and communications skills to successfully interface across various levels and maintain solid working relationships
•    Strong desire to continually deliver a quality and meaningful work product in a timely and efficient manner