Operational and Permanent Control Regulatory Analyst

OPERATIONAL AND PERMANENT CONTROL REGULATORY ANALYST (JOB NUMBER: 2402GMFOS17432)

**About the job**
- The OPC Senior Analyst operates the Control framework relating to all operational risks, including Fraud, Third Party, Conduct, Compliance, Regulatory, Information & Communication Technology risks, and others risks types. OPC is responsible for the deployment of internal policies and procedures issued by specialized independent control functions part of Risk teams (2nd Line of Defence), and for the compliance with external regulatory and supervisory requirements

**Your Main Activities Are**
- Identify and assess risks and controls (Risk and Control Self-Assessment) of higher complexity, by ensuring that key operational units and processes, material risks and risk mitigants are identified. Perform/drive the risk identification and assessment in liaison with independent control Functions when needed, ensuring validation by the relevant management level and consistency with the defined risk tolerance. Contribute to the definition and follow-up of remediation plan if needed
- Manage Procedures by ensuring that Group procedures requirements are implemented locally, complemented with local specificities (regulations, tools, organizations...). Ensure that the procedures designed by the businesses and functions are identified, updated, properly stored and communicated to the relevant stakeholders within the Operating Entity. Identify and propose calibration of procedures according to the outcome of the risk assessment and other risk events (HI, control results, external events, Audit missions)
- Implement Complex and elaborated controls and action plans: by defining and regularly updating the control plans according to the outcome of the risk assessment, regulations, other risk events (Historical Incidents, control results, external events, Audits). Perform and/or coordinate controls according to this control plan. Ensure that control results are reviewed and analysed by the Management and when relevant by operational teams / relevant stakeholders and that remediation action plans are defined if and when needed. Input in Group tools the control results and major action plans. Follow-up the implementation of high-complexity remediation actions
- Document findings, recommendations and permanent control actions: Upon notification/receipt of reports, organise the follow-up of the findings and recommendations on more complex and difficult situations, either issued internally (e.g. IG supervision) or externally (external auditors, supervisors) and ensure that they are closed within due date
- Manage historical incidents with a higher complexity nature, by alerting the management and the independent control functions if needed on key incidents. Collect incidents (including impacts measurement), report and update in the incidents database, including suspected and attempted fraud cases. Analyse complex and difficult incidents in a timely manner and define, jointly with the relevant stakeholders, the correctives measures be implemented to mitigate risks. Follow-up and /or initiate the implementation of elaborated remediation actions and the unfolding of long term incidents. Perform controls on the incident collection process, in particular the cross-check with other databases (accounting or other when existing) and the half-yearly attestation by the local management
- Provide complex and consistent Management support and governance by active contribution (or organization) to any committee on Operational risks and Permanent Control committees. Alert and escalate to the relevant level of management any operational risk incident and/or any recurring weakness. Perform periodic and ad-hoc reporting to the appropriate level of management as well as to independent control functions. Support in the appropriate training on Operational risks and Permanent Control framework is provided to employees, notably newcomers. Show ability to take ownership of specific OPC activity streams/topics, and be able to deliver the full and exhaustive actions taken on the assigned process(es) to the management
- Manage OPC related Projects including frame, design and lead autonomously the delivery of one or more projects, ensuring quality and respect of deadlines. Take full ownership on assigned modules and perform complex analyses whilst understanding their potential impact for the concerned teams/internal clients. Lead workshops and meetings using relevant techniques and providing insightful results. Deliver meaningful content bringing out-of-the-box ideas on top of classic methodologies. Prepare, structure and conduct/deliver presentations for Business/Top Managers
- Support team members' development by seeking proactively to participate and help the team beyond the assigned duties. Coach junior team members and contribute to their professional development. Facilitate the knowledge sharing within the team

**Profile and Skills to Success**
- Bache