Director, ORM Methodology and Reporting

About the role

Provide strategic leadership for ORM methodology and standards, ensuring consistent, high-quality execution of risk identification, assessment, monitoring, and reporting across the enterprise.

Own and evolve the operational risk policy, framework and underlying methodologies (e.g., RCSA/PRA, scenario analysis, KRIs, issue management, risk acceptance and risk reporting), aligning to regulatory expectations and leading industry practices.

Lead the development of enterprise and functional non-financial risk reporting, including quarterly risk profiles, dashboards, and forward-looking risk insights that clearly articulate the “so what” for decision-makers.

Translate complex risk information into compelling, audience-appropriate narratives, effectively supporting discussions with business leaders, risk committees, executive management, and the Board.

Serve as a trusted advisor to Risk leadership, providing expert judgment on complex operational risk matters, control effectiveness, and risk acceptance decisions.

Oversee governance and execution of risk issue management, including identification, root cause analysis, remediation challenge, progress tracking, escalation, and clear reporting of outcomes.

Embed ORM methodology into major business and technology initiatives, ensuring risks are proactively identified, assessed, and transparently communicated throughout the initiative lifecycle.

Provide second-line challenge to process design and control effectiveness, recommending enhancements to policies, procedures, and controls that improve resilience, execution quality, and efficiency.

Ownder adherence to the Global Operational Risk Management policy and framework, ensuring consistent execution of core ORM activities and effective use of enabling tools and systems.

Build and maintain strong relationships with senior stakeholders and global ORM counterparts, promoting best practices, continuous improvement, and a strong, risk-aware culture across the organization.

Responsibilities

• Provide strategic leadership for ORM methodology and standards, ensuring consistent, high-quality execution of risk identification, assessment, monitoring, and reporting across the enterprise.
• Own and evolve the operational risk policy, framework and underlying methodologies (e.g., RCSA/PRA, scenario analysis, KRIs, issue management, risk acceptance and risk reporting), aligning to regulatory expectations and leading industry practices.
• Lead the development of enterprise and functional non-financial risk reporting, including quarterly risk profiles, dashboards, and forward-looking risk insights that clearly articulate the “so what” for decision-makers.
• Translate complex risk information into compelling, audience-appropriate narratives, effectively supporting discussions with business leaders, risk committees, executive management, and the Board.
• Serve as a trusted advisor to Risk leadership, providing expert judgment on complex operational risk matters, control effectiveness, and risk acceptance decisions.
• Oversee governance and execution of risk issue management, including identification, root cause analysis, remediation challenge, progress tracking, escalation, and clear reporting of outcomes.
• Embed ORM methodology into major business and technology initiatives, ensuring risks are proactively identified, assessed, and transparently communicated throughout the initiative lifecycle.
• Provide second-line challenge to process design and control effectiveness, recommending enhancements to policies, procedures, and controls that improve resilience, execution quality, and efficiency.
• Ownder adherence to the Global Operational Risk Management policy and framework, ensuring consistent execution of core ORM activities and effective use of enabling tools and systems.
• Build and maintain strong relationships with senior stakeholders and global ORM counterparts, promoting best practices, continuous improvement, and a strong, risk-aware culture across the organization.

Qualifications

• Bachelor’s degree in accounting, finance, or relevant field
• 12 years of experience in operational risk management or internal controls, or equivalent management experience in an operational role with strong knowledge of operational risk management or internal controls
• Progressive leadership experience in operational risk management, internal controls, audit, or relevant field
• In-depth knowledge and hands-on experience with risk management principles and techniques including development of process flows, identification and assessment of risks and controls, testing and monitoring procedures, and development of related metrics
• Analytical skills to identify risk trends and changing risk levels
• Strong attention to detail and accuracy
• Able to work in a fast-paced organization and prioritize multiple initiatives
• Able to use sound judgment to resolve issues and facilitate progress against objectives
• Able to present and interact with various levels of management
• Able to build relationships with people at all levels
• Excellent oral/written communication skills

Preferred Qualifications

• Strong knowledge and/or experience in the insurance or financial services industry
• CPA/CIA/ACSA