Operational and Permanent Control Senior Officer

**About the job**
- The Operational and Permanent Control (OPC) Senior Officer operates the Control framework relating to all operational risks, including Fraud, Third Party, Conduct, Compliance, Regulatory, Information & Communication Technology risks, and others risks types
- The OPC Senior Officer plays a significant role in the Global Banking Worldwide Risk and Control Self-Assessment (RCSA) campaign, from coordinating the execution of the exercise, contributing to the definition and communication of the specific methodologies to supporting the OPC worldwide community notably as part of the RCSA Streamlining initiative
- The OPC Senior Officer is responsible for the overall worldwide coordination related to operational risks and deployment of internal policies and procedures, contributing to any other components of the Operational Risk Management framework (controls, incidents, regulators demand, findings and recommendations, tooling, committees)

**Your Main Activities Are**
- Identify and assess risks and controls (RCSA) by ensuring that key operational units and processes, material risks and risks mitigants are identified by:

- Coordinating and monitoring the RCSA campaign at worldwide level, acting as a SPOC supporting Global Banking OPC community, planning and facilitating regular follow-up meetings with Level of Defense 1 (LoD1) and Level of Defense 2 (LoD2)
- Anticipating and alerting on any blocking points that could jeopardize completion of the RCSA campaign, LoD2 Check and Challenge review
- Updating Business Unit or Business Unit Group list for Global Banking EMEA perimeter, liaising with IT Group for any changes
- Manage procedures by ensuring that Group procedures requirements are implemented locally, complemented with local specificities (regulations, tools, organizations), and ensuring that the procedures designed by the businesses and functions are identified, updated, properly stored and communicated to the relevant stakeholders within the Operating Entity. Identify and propose calibration of procedures according to the outcome of the risk assessment and other risk events (historical incidents, control results, external events, audit missions).
- Implement controls and action plans, by defining and regularly updating the control plans according to the outcome of the risk assessment, regulations, other risk events (historical incidents, control results, external events, audits) and perform or coordinate controls according to this control plan. Ensure that control results are reviewed and analyzed by the Management and when relevant by operational teams and relevant stakeholders and that remediation action plans are defined if and when needed, ensuring input in Group tools the control results and major action plans and follow-up of the implementation of remediation actions
- Document findings, recommendations and permanent control actions upon notification or receipt of reports, organize the follow-up of the findings and recommendations, either issued internally (IG supervision) or externally (external auditors, supervisors) and ensure that they are closed within due date
- Manage historical incidents by alerting the management and the independent control functions if needed on key incidents. Collect incidents (including impacts measurement), report and update in the incidents database, including suspected and attempted fraud cases. Analyze incidents in a timely manner and define, jointly with the relevant stakeholders, the correctives measures be implemented to mitigate risks. Follow-up or initiate the implementation of remediation actions and the unfolding of long-term incidents. Perform controls on the incident collection process, particularly the cross-check with other databases (accounting or other when existing) and the half-yearly attestation by the local management
- Provide Management support and governance by active contribution (or organization) to any committee on Operational Risks and Permanent Control committees. Alert and escalate to the relevant level of management any operational risk incident or any recurring weakness. Perform periodic and ad-hoc reporting to the appropriate level of management as well as to independent control functions
- Ensure an appropriate training on Operational risks and Permanent Control framework is provided to employees, notably newcomers
- Take ownership of specific OPC activity streams or topics, and deliver the full and exhaustive actions taken on the assigned processes to the Management

**Profile and Skills to Success**
- Bachelor’s degree in Business Management, Economics, Finance or Accounting
- At least 5 years of experience in Risk and Controls, Audit, Compliance, or Project Management and Consulting
- Knowledge of Operational Risk, Permanent Control, Risk Analysis and Monitoring
- Proficiency in Microsoft Office tools
- Excellent communication skills and fluency in English
- Strong analytical skills and ability to develop and adapt a