Operational & IT Risk Manager

We are hiring an Operational & IT Risk Manager who will assist the Head of Operational Risk to develop, enhance and embed CMCMarkets’ Operational Risk Management policy, framework, systems and processes across the organisation, which will specifically include oversight of ICT Risk Management and Operational Resilience.

The Operational & IT Risk Manager will play a pivotal role within the function by acting as a key point of contact for the business in supporting and advising them on the effective management of their risks and issues. This will include risk identification and assessment, incident management, controls enhancements, change risk assessment as well as developing the Operational Risk Review programme across CMC Markets Group. The Senior Operational Risk Manager will assist the Head of Operational Risk to create a strong operational risk management culture and awareness across the organisation. The Operational & IT Risk Manager will have specific responsibility for the following items:-

• Oversee the management of ICT risk and Business Resilience, including adequacy of policies and frameworks, to ensure that CMC Markets delivers on the requirements of DORA regulation.
• Manage the Incident Management process across assigned areas of the business and act as risk subject matter expert. This will include ensuring that incidents are effectively investigated, that the root causes are identified and that the issues are remediated properly. Furthermore, the actions to address root causes should be recorded within the relevant RACA and the actions tracked through resolution;
• Monitor trends in loss data including near misses, providing appropriate advice to the business on emerging trends as well as sharing 'lessonslearnt’ across functions.
• Manage and facilitate the Risk & Control Assessments completed by the business providing advice and challenge on the identification, assessment and mitigation of the risks faced by the business. Act as a subject matter expert for any queries from the business relating to completion of RACAs. Support the aggregation of risks across the taxonomy and the evaluation of risks against Corporate Risk Appetite. Ensure that risk assessments are aligned to incident and KRI experience.
• Recommend changes to controls/procedures where these are not sufficient to mitigate underlying risks, ensuring that associated risk documentation e.g. RACA is updated as required
• Collaborate and advise the business on the setting of effective Key Risk Indicators (KRIs). Monitor the performance against these KRIs, extracting relevant key messages and concerns for reporting and escalation.
• Provision of guidance and advice (subject matter expertise) to all areas of the business regarding Operational Risk including policies and procedures;
• Support the development and management of the risk management system and its components. Ensure that all users are aware of their responsibilities when using the system, particularly in respect of accuracy and quality when inputting data.
• Support the assessment of risk as part of the Significant Business Change approval process, ensuring appropriate control function involvement;
• Support the Scenario Analysis, Reverse stress test and stress test processes as appropriate.
• To produce high quality written reports providing assessment of overall operational risk management within the areas under review, in line with agreed time frames;
• Contribute to the provision of quality Operational Risk Management Information for reporting to governance forums e.g. Risk Management Committee and senior management on a regular basis;
• Assist with the development, roll out and tracking of appropriate Operational Risk training materials across all areas of the business;

KEY SKILLS AND EXPERIENCE

• Extensive experience within an Operational Risk role (5-10 years), preferably within a Financial Services environment;
• ICT and Business Resilience Risk Management experience
• Deep experience and knowledge of operational risk methodologies and the ability to apply them in a value added way;
• Broad knowledge of regulation affecting risk management, including new DORA regulation
• Operational Risk Management qualification (desirable);
• Operations experience (desirable)
• Project management experience (desirable);
• Strong MS Excel, MS Word and PowerPoint skills.

CMC Markets is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of gender, sexual orientation, marital or civil partner status, gender reassignment, race, colour, nationality, ethnic or national origin, religion or belief, disability or age