Associate, Technology Risk

Company Overview

Bank OZK, founded on a legacy of more than 120 years in banking, is nationally recognized as an industry leader in financial services. We combine exceptional service with innovative technologies to deliver smart solutions to our clients across the country, investing in small businesses, fueling local economies, and shaping skylines in major cities.

Benefits

• Generous paid time off (PTO)
• 401(k) matching
• Health, dental, and vision insurance (including pet coverage)
• Special perks and discounts

Job Purpose & Scope

Supports the Bank’s first line of defense by assisting with operational risk management, audit and regulatory coordination, and technology governance activities. This role helps identify, assess, document, and mitigate technology and operational risks while supporting internal audits, external audits, and regulatory examinations.

Essential Job Functions

• Provides oversight of operational risk within OZK Technology and related groups, delivering adequate reporting to senior management.
• Serves as a liaison with Operational Risk Management (ORM) to manage risk control self‑assessments (RCSA).
• Ensures key controls for assigned business unit processes are mapped and monitored, analyzes test results, and acts on failures to prevent recurrence.
• Validates that key controls are identified, mapped, monitored, and operating effectively; tracks remediation of identified control deficiencies.
• Participates in the creation and modification of governance documentation for assigned business units.
• Assesses risk when business decisions are made, considering the Bank’s reputation and safeguarding the Bank and its customers.
• Contributes to reviewing internal processes and activities, assisting in identifying potential improvement opportunities.
• Supports assigned business units in identifying, reducing, and maintaining related residual risks.
• Maintains current knowledge of evolving technologies, threats, and regulations enforced by the FFIEC, FDIC, and other supervisory agencies.
• Simultaneously manages three to seven audits while adapting to changing priorities.
• Works closely with leadership to gather and provide requested informational artifacts to auditors within required timelines.
• Produces accurate, detailed, and timely work while meeting commitments and following policies and procedures.
• Provides risk and control information and artifacts to ORM within required timelines.
• Works efficiently with moderate supervision, requiring assistance in prioritizing initiatives.
• Communicates effectively both verbally and in writing with all levels of the organization.

Knowledge, Skills & Abilities

• Knowledge of banking laws and regulations, particularly those related to bank protection.
• Knowledge of Microsoft software and servers, cybersecurity activities, and identity access management.
• Ability to communicate effectively both verbally and in writing.
• Ability to demonstrate initiative to accomplish work objectives.
• Ability to work effectively and demonstrate flexibility in a continually changing environment.
• Strong organization, critical thinking, analytical, and problem‑solving skills.
• Ability to manage multiple tasks with exacting deadlines in a fast‑paced environment.
• Ability to produce documents, presentations, and analyses in a meaningful format.
• Ability to work without close supervision.
• Ability to travel occasionally on company business.
• Proficiency with Microsoft Office, including Outlook, Word, Excel, and PowerPoint.

Basic Qualifications

• Bachelor’s degree or commensurate work experience.
• 2+ years of experience in technology operational risk, compliance, audit, information security, or IT governance, preferably in banking or financial services.
• 1+ year of experience participating in or performing risk assessments (preferred).
• Professional certification related to operational risk management, audit, cybersecurity, or database administration.
• Familiarity with technology governance, risk management, access controls, or cybersecurity concepts (preferred).

Job Expectations

• Operate customary equipment and technology used in a business environment, with or without accommodation.
• Note: This description is not an exhaustive list of all job functions, duties, skills, and standards required; additional responsibilities may be assigned as needed.