Senior Analyst - Risk Management

This role will perform assurance-type activities within enterprise risk management, resiliency program, InfoSec and third-party risk management to ensure quality and compliance with policies and procedures. This could include reviews of unit and MGS-level business continuity plans, technology continuity plans, incident and exercise after-action reports, identifying risks, control documentation/evidence, validating and tracking remediation of findings to closure with a sense of urgency and attention to detail.

Responsibilities:

• Responsibilities extend beyond assurance and could include validation testing, report management, liaising with partner resiliency programs, independent risk management and audit, third-party inherent risk assessment, information security spot checks, TPRM due diligence
• Ensure issues/action plans arising from self-identified issues, RCSA, risk events, KRI's or other risk issues are properly followed up.
• Escalate on a timely basis significant risk issues to management for taking appropriate remedial actions.
• Work in partnership with all units in MGS to implement policy criteria and help them with adherence.
• Present MIS and risk data in required formats which are visual, universally understandable, or easy to interpret (e. g., dashboards)
• Design the BCP annual testing plan for MGS and implement the same, liaising with various units within MGS.
• Forward-looking risk identification and management across different risk types.
• Serve as a risk management subject matter expert for the business.
• Provide and enhance risk reporting to management and relevant risk forums.
• Execute risk management training and promote a proactive risk culture.
• Provide expertise and guidance on risk management concepts.
• Proactively engage in internal audits, information security, business continuity and third-party risk management to support an integrated approach to risk management.
• Share knowledge and expertise to achieve shared goals.
• Create risk awareness and drive risk culture within MGS.
• Ensure that onboarding risk assessments and renewal risk assessments of vendors are performed.
• Highlight open risks to risk forums promptly.
• Ensuring identification and governance around critical vendors, material outsourcing and due diligence is done for all critical vendors as per the VMO framework.

Requirements:

• A successful candidate in this role makes decisions with accuracy, is self-motivated and does what's right. A background in business resiliency and continuity concepts is a must.
• Should be able to analyse and mitigate risks.
• 10 years of experience in risk management in the financial services industry.
• Preferred expertise in enterprise risk with familiarity with business continuity, information security and third-party risk management.
• Excellent interpersonal and oral and written communication skills.
• Strong communication, facilitation and influencing skills, able to articulate and communicate complex ideas and concepts in a clear, concise, and structured manner.
• Ability to cultivate relationships and collaborate with multiple stakeholders, including business leaders, legal, internal audit, and technology, etc.
• Knowledge of enterprise risk management frameworks and principles.