Operations Business Risk and Controls (OBRC)

The Operations Business Risk and Controls (OBRC) function manages core business risk and control activities, including Risk and Control Self-Assessments (RCSA), control testing, and quality assurance. Additionally, it serves as a second-line capability by defining policies, procedures, and methodologies for Operational Resilience and Third-Party Risk Management (TPRM).

As an Assistant Vice President - Operations Control and Resilience, you will support the enhancement of the Bank’s control environment by validating controls, performing RCSA activities, and providing assurance on control effectiveness. You will work with control owners and stakeholders to identify gaps, manage remediation actions, and strengthen operational risk frameworks. You will work with different business stakeholders to ensure controls are practical, effective, and aligned with regulatory and Operational Resilience requirements, including lessons learned, assurance testing, and third-party risk activities.

This is a full-time permanent position.

Key Responsibilities

• Review Quality Assurance (QA) activities to identify process gaps, define evidence requirements, establish testing procedures, and conduct walkthroughs with control owners
• Take ownership of the end-to-end design, validation, and performance monitoring of existing and newly enhanced controls
• Support target business lines with the remediation of control deficiencies, ensuring the maintenance of accurate testing and QA records
• Conduct risk assurance analysis, integrating lessons learned and resilience testing assurance into the RCSA framework to enhance risk metrics
• Conduct control testing and QA to ensure operational teams maintain adequate RCSA controls, promptly escalating deficiencies, policy breaches, and overdue actions while collaborating closely with divisional Operational Risk coordinators
• Act as a core contributor to the Operational Resilience uplift programme, driving enhancements across governance, policies, and methodologies
• Support Important Business Services (IBS) mapping, impact tolerance assessments, scenario testing, and related control assurance activities tied to the implementation and evaluation of contingency plans and playbooks
• Maintain and review departmental reports prior to submission to Head Office, executive management, regulators, Audit and Risk, ensuring data accuracy and governance compliance
• Partner with stakeholders across operations and resilience pillars to enhance organizational readiness, promoting a robust risk culture and embedding effective control ownership across business functions