Lead Specialist, Operational Risk

Lead Specialist, Operational Risk II – Enterprise Risk Management

Job Title

Lead Specialist, Operational Risk II

Reporting to

Director, Operational Risks

Business Unit / Function

Legal, Risk & Compliance

Department

Enterprise Risk Management

Grade

M11

Position Type

Regular

Why This Role Matters

Responsible for supporting the design, implementation, and continuous improvement of the organization’s enterprise-wide risk management framework, ensuring alignment with strategic objectives, risk appetite, and governance requirements. The role enables informed decision-making by providing effective identification, assessment, monitoring, reporting, and escalation of risks that may impact the achievement of organizational objectives.

What You Will Deliver

• Support the implementation and continuous enhancement of the enterprise risk management (ERM) framework, ensuring alignment with approved risk appetite, governance structures, and leading practices.

• Lead and facilitate enterprise and functional risk assessments, including workshops and interviews, to identify, assess, and prioritize Strategic, Principal, Operational, and Emerging Risks.

• Partner with business and functional leaders to develop and monitor risk treatment plans, ensuring clear ownership, accountability, and timely escalation of overdue or ineffective actions.

• Prepare and present consolidated risk reports, dashboards, trends, and forward-looking insights to executive management and governance committees to support effective oversight and decision-making.

• Act as a trusted ERM advisor to management, providing guidance and constructive challenge on risk identification, assessment, treatment, and the integration of risk considerations into strategic and business decisions.

• Monitor regulatory developments, industry trends, and emerging risk indicators to proactively identify changes in the organization’s risk profile and support timely assessment and escalation of emerging risks.

• Conduct second-line review and challenge of risk registers, risk assessments, controls, KRIs, and mitigation actions to promote consistency, quality, and alignment with the ERM Framework.

What Success Looks Like

• ERM is consistently embedded across the organization, with high-quality risk assessments, registers, and reporting maintained in line with governance requirements.

• Strategic, Principal, Operational, and Emerging Risks are proactively identified, assessed, monitored, and escalated to support timely management action.

• Risk appetite, KRIs, thresholds, and mitigation actions are effectively monitored, with material exposures appropriately challenged and escalated.

• Executive management and governance committees receive clear, timely, and decision-useful risk insights.

• Risk ownership and accountability are strengthened across the business, with ERM effectively integrated into strategic planning and decision-mak

Minimum Qualifications

• Bachelor's degree in Business Administration, Accounting, Finance, Engineering, or a related field; master's degree preferred.

Experience

• 5+ years of experience in enterprise risk management or related risk disciplines, with demonstrated experience in implementing and operating enterprise-wide risk frameworks, facilitating risk assessments, and supporting senior management risk reporting. Professional risk management certifications (e.g., CRM, CRISC, or ISO 31000-related certification) are an advantage.

Skills That Matter

• Strong analytical and critical-thinking skills, with the ability to synthesize complex risk information into clear, decision-useful insights for senior stakeholders.

• Strong knowledge of enterprise risk assessment methodologies, risk appetite, KRIs, risk reporting, and risk management tools and dashboards.

• Solid understanding of corporate governance, regulatory expectations, and leading ERM standards and practices.

• Strong facilitation, stakeholder engagement, and influencing skills, with the ability to constructively challenge risk assessments and management decisions.

• Strong written and verbal communication skills, with the ability to communicate complex risk matters clearly to senior management and governance committees.