Associate Principal, Operational Risk Management and Controls
$98,100–$142,000 year
HybridChicago, Illinois, United States
Job Summary
Evaluate IT and Security risks by assisting with risk assessments and applying the risk management framework across the process, risk, and control universe. Lead the OCC's risk identification and assessment process (Risk Intake) for IT, Security, and business risks, verifying framework consistency and reliability. Collaborate with IT, Security, TPRM, Legal, Compliance, and Internal Audit to strengthen overall IT and Security risk management, ensuring alignment with regulatory requirements and OCC strategy. Generate Archer data reports for stakeholders and regulators while helping automate IT and Security risk oversight. Maintain risk inventories and taxonomies, track internal findings and external exam issues, and communicate assessment results to governance committees and leadership. Work three days per week in the Chicago office with a hybrid schedule allowing up to two days of remote work.
Required Qualifications
- Advanced understanding of IT risk, Security risk, and intermediate understanding of Operational risk
- Ability to act as a trusted advisor and provide effective challenge
- Creative, independent thinker, with a willingness to develop and drive new ideas
- Excellent written, verbal and presentation skills
- Must be team-oriented and be able to collaborate effectively in department and cross-departmental efforts
- Ability to work under pressure and with tight deadlines
- Proficient in Microsoft Word, Excel, Access, and PowerPoint
- Bachelor's Degree in Finance, Business, Information Systems, Computer Science (or equivalent) preferred
- 3+ years of experience in enterprise risk, technology risk, security risk, or risk consultancy, specifically with focus on assessing IT and Security risk
- Certification such as: CPA, CISSP, Security+, CSX-P, CET, CISA or CISM
Desired Qualifications
- Familiarity with Financial Market Utilities; securities and derivatives markets
- Ability to work in a highly regulated environment, including with the SEC, CFTC, and Federal Reserve; Familiarity with the Covered Clearing Agency regulations
- Consulting experience
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.