Operations Business Risk and Controls (OBRC)

The Operations Business Risk and Controls (OBRC) function manages core business risk and control activities, including Risk and Control Self-Assessments (RCSA), control testing, and quality assurance. Additionally, it serves as a second-line capability by defining policies, procedures, and methodologies for Operational Resilience and Third-Party Risk Management (TPRM).

As an Associate - Operational Resilience, you will support the enhancement of the Bank’s resilience framework by validating continuity structures and providing assurance on protective environment. You will assist in conducting the annual cycle of Operational resilience, Business Continuity Management (BCM) and crisis management activities. You will work with different business stakeholders to ensure Business Continuity Plans (BCPs) and Impact Tolerances (ITOLs) are practical, effective and aligned with regulatory and Operational Resilience requirements, including lessons learned, assurance testing and third-party risk activities. This is a full-time permanent position.

Key Responsibilities

• Facilitate the identification of Important Business Services (IBS), manage impact tolerance mapping and execute related control assurance activities tied to the validation of contingency plans and crisis playbooks
• Coordinate and guide business lines through the completion of their Business Impact Analyses (BIAs) and Risk Assessments, ensuring all BCPs are up to date and formally validated
• Partner closely with specialists across all core resilience pillars, including Information Security, IT Risk, Data Privacy, Third-Party Risk Management (TPRM), HR and Facilities Management to streamline underlying dependency mapping and delivering integrated testing assurance
• Analyse and map operational resilience metrics against the Bank's approved Risk Appetite Statement (RAS) and Key Risk Indicators (KRIs), ensuring that impact tolerances and recovery strategies remain strictly aligned with the Bank's boundary limits
• Conduct deep risk assurance analysis, integrating lessons learned from severe but plausible scenario testing directly into the Risk and Control Self-Assessment (RCSA) framework to enhance predictive resilience metrics
• Actively contribute to the Operational Resilience and BCM framework uplift programme, assisting in driving structural enhancements across policies, methodologies, and governance structures
• Support the functional design, enhancement and customisation of the Bank's internal resilience, BCM and incident management software tools
• Produce departmental reporting dashboards and packs prior to submission to the Head of Department, Executive Management, Regulators, Audit and Risk, ensuring data accuracy and corporate governance compliance
• Draft comprehensive, analytical Post-Incident Reviews (PIRs) and testing summary reports, ensuring all identified capability gaps and resource shortfalls are captured for remediation tracking
• Partner with stakeholders across business lines and technology pillars to enhance organizational readiness, promoting active framework ownership and an embedded risk-aware culture across business services
• Support with preparation of governance packs across different committees