Operational Risk and Physical Security Manager

At U.S. Bancorp India, we’re on a journey to do our best. We believe it takes all of us to bring our shared ambition to life, and each person is unique in their potential. A career with U.S. Bancorp India gives you a wide, ever-growing range of opportunities to discover what makes you thrive at every stage of your career. Try new things, learn new skills and discover what you excel at—all from Day One.

Job Description About the Role

The Operational Risk Manager is a senior role within the Global Capability Centre (GCC) in India, as part of the Risk Management team for the GCC and reporting directly to the Chief Risk Officer (CRO). The role carries accountability for the day-to-day operation of the GCC’s Operational Risk Management Framework (ORMF) across the GCC including Policy adherence governance, Third Party Risk Management (TPRM) lifecycle and Reporting.

Key Responsibilities

1.  Policy Adherence & Governance Monitor and enforce compliance with the Group’s Operational Risk Policies (as applicable) and related standards for the GCC business &  functions.

Support the periodic review, update, and implementation of operational risk policies, ensuring alignment with evolving Group standards as required.

Prepare and present policy compliance dashboards, exception logs, and breach reports to the CRO and Risk & Compliance Committee.

Drive awareness programmes and relevant training across GCC business lines to embed a strong policy adherence culture.

2.  Operational Risk Framework Execution Lead Risk and Control Self-Assessment (RCSA) exercises across GCC business units; facilitate workshops to identify material risks, assess control effectiveness, and agree remediation plans.

Define, monitor, and report Key Risk Indicators (KRIs) and Key Control Indicators (KCIs); escalate threshold breaches to the CRO promptly.

Manage the operational risk event lifecycle: capture, classification, root cause analysis, lessons learned, and linkage to regulatory loss data reporting under Basel III / RBI norms.

Coordinate scenario analysis and stress testing for operational risk capital assessment in collaboration with Group Finance and Risk teams.

Maintain the GCC Business Continuity and Operational Resilience risk register; support BCP testing and resilience planning from a risk oversight perspective.

3.  Third Party Risk Management (TPRM) Aligned to the Group’s TPRM policy ensuring the that the GCC adheres to the required: vendor onboarding risk assessment, inherent and residual risk tiering, periodic reassessment, trigger-event reviews are conducted by relevant business lines.

Coordinate risk analysis across the GCC vendor portfolio; escalate systemic third party risks to the CRO and relevant governance committees.

Act as the primary liaison with Group TPRM teams, ensuring the GCC framework remains aligned with Group level enterprise policy.

Lead critical vendor reviews and present findings to the CRO and senior leadership on a periodic basis.

4.  Reporting & CRO Support Prepare high-quality risk MI packs, Board Committee papers, and CRO briefings covering TPRM status, policy compliance, , KRI dashboards, and emerging risk themes.

Provide the CRO with timely, forward-looking risk intelligence on external threats or  developments, third party incidents, and operational risk trends affecting the bank’s GCC operations.

Act as a single point of contact for internal audit, external auditors, on matters relating to operational risk and third party risk management in the GCC.

Support the CRO in preparing for regulatory examinations (RBI Risk Based Supervision, DFSIT inspections) and responding to regulatory queries.

5.  Stakeholder Management & Risk Culture Build trusted relationships with GCC business & functional heads to embed risk considerations in business decisions.

Partner with the Group Operational Risk, Third Party Risk, and other key stakeholders to ensure consistent framework application and knowledge sharing across geographies.

Champion a proactive, risk-aware culture within the GCC – moving from risk policing to risk partnership.

Qualifications & Experience

Required Third level Qualification in Finance or Risk Management.

10 years of experience in operational risk, third party / vendor risk management, or enterprise risk with a financial services GCC.

Proven experience of Operational Risk including TPRM programmes in a banking context.

Hands-on experience with RCSA, KRI/KCI frameworks, operational risk event management

Strong policy governance experience, including drafting, reviewing, and managing exceptions to complex risk policies.

Demonstrated ability to prepare executive-level and Board-quality risk reports and present to senior leadership including CRO-level stakeholders.

Excellent communication, influencing, and stakeholder management skills in a matrixed, global organisation.

Preferred Prior experience in a GCC or captive centre environment for a global bank.

Exposure to international outsourcing and TPRM regulatory frameworks

Working knowledge of GRC platforms such as Archer, ServiceNow

Experience of India’s Digital Personal Data Protection Act (DPDP)

#LI-DNI 

If there’s anything we can do to accommodate a disability during any portion of the application or hiring process, please refer to our  disability accommodations for applicants .

Posting may be closed earlier due to high volume of applicants. This is an U.S. Bancorp India posting. U.S. Bancorp India is a part of the U.S. Bank family.