Operational Risk Officer – Third Party Risk Management
Primary Talent Partners · Jersey City, NJ · 1 mo ago
On-siteFinance$70–$77.5/hrContract
We need to output HTML fragment with headings for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Must preserve all substantive info. Remove boilerplate like EEO, etc. Also remove application instructions. Must not include sections with filler like "commensurate with experience". Pay is given: $70.00 - $77.50/hr; W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment. So we have Pay and Benefits info. Benefits: "no Benefits" but ACA-compliant supplemental package available for enrollment. That's still a benefit? It says no Benefits, but supplemental package available. We can include Benefits section describing that. Schedule? Not mentioned. So omit Schedule.
We need sections: About the role (maybe description of role), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay.
We must not invent content. Use info from posting.
Let's extract:
About the role: Could be the "Job Purpose" and "Business Area/Dept Overview". That's substantive.
Responsibilities: The list under "As an Operational Risk Officer your responsibilities will include:" and also "Core accountabilities of role". We'll combine.
Requirements: Might be "Knowledge, Skill and Experience:" plus "BUSINESS / IT SKILLS", "BEHAVIOURAL SKILLS", "TRANSVERSAL SKILLS". Those are requirements/qualifications. We'll separate maybe Requirements (knowledge/skill/experience) and Qualifications (maybe same). But we need to avoid thin sections. Could combine into one Requirements section covering all. But instructions: Use headings for each if content exists. We can have Requirements and Qualifications separate if distinct. However the posting lumps knowledge, skill, experience; business/it skills; behavioural skills; transversal skills. Could treat as Requirements. Qualifications maybe not separate. Could omit Qualifications if no distinct content. But we need to include only when posting has real specific content. There is content for skills etc. Could put them under Skills section. But we also have Skills heading. Might be redundant.
Better: Use sections: About the role, Responsibilities, Requirements (covering knowledge, skill, experience, business/it skills, behavioural, transversal), Benefits, Pay.
We must not include Qualifications if not distinct. Could still include Qualifications but would be thin. Safer to omit.
Now extract details.
About the role: Combine Business Area/Dept Overview and Job Purpose.
Let's craft a paragraph.
Responsibilities: bullet list from the responsibilities list and core accountabilities.
We need to preserve all substantive info; not invent or summarize away detail. Must keep details like specific activities: independent review, challenge, advisory support over 1LOD execution of third party risk management processes, including due diligence, risk assessment, ongoing monitoring, issue management, governance routines; partner with CIB Central teams on regional and global initiatives, framework enhancements, remediation programs, regulatory commitments, and process improvements related to third party and outsourcing risk; execute BAU check and challenge activities across risk and control self-assessments, key risk indicators, risk events, control testing outcomes, action plans, and governance materials; support preparation and review of management reporting, committee materials, regulatory updates, risk appetite metrics, and escalation packs related to third party risk and operational risk management; challenge adequacy of remediation plans, monitor progress against milestones, assess evidence of closure, escalate overdue or ineffective remediation; help ensure local practices remain aligned with applicable Group, regional, and CIB requirements for third party, outsourcing, operational resilience, and operational risk management. Also core accountabilities: Provide independent Operational Risk oversight, review, and challenge over CIB third party risk management activities, with a focus on the effective execution of 1LOD responsibilities and alignment with applicable policies, procedures, and risk appetite expectations; partner with CIB Central teams and other stakeholders on third party risk initiatives, including governance enhancements, control improvements, remediation programs, data quality improvements, and regulatory or audit-driven deliverables; execute BAU Operational Risk check and challenge activities, including review of risk assessments, control results, incidents, issues, action plans, metrics, and governance materials, ensuring that risks are clearly articulated, appropriately assessed, and escalated where required.
We'll combine but avoid duplication. Could list unique items.
Requirements: Knowledge, Skill and Experience list: Strong understanding of operational risk management, third party risk management, outsourcing governance, control frameworks, and the three lines of defence model within a financial services environment. Excellent analytical, communication, and stakeholder management skills, with the ability to provide effective challenge, influence outcomes, and explain risk and control matters clearly to both senior and working-level stakeholders. Third Party Risk Management: Experience reviewing or overseeing third party lifecycle activities, including inherent risk assessment, due diligence, contractual controls, ongoing monitoring, concentration risk, exit strategy, and issue remediation. Operational Risk Check and Challenge: Ability to assess the design and operating effectiveness of controls, identify control gaps, challenge risk ratings, and evaluate the adequacy of action plans and closure evidence. Governance and Reporting: Experience preparing, reviewing, and challenging management information, committee materials, risk appetite metrics, issue tracking, and senior management updates. Regulatory and Audit Awareness: Knowledge of regulatory expectations (including but not limited to US Interagency Third Party Risk Management Guidance), audit practices, and evidence standards relevant to third party, outsourcing, operational resilience, and operational risk management. Strong communication, stakeholder management, and business relationship skills, with the ability to connect technical teams with junior and senior business stakeholders.
BUSINESS / IT SKILLS list: Operational Risk Management, Third Party Risk Management, Outsourcing Governance, Risk and Control Assessment, Governance, Reporting and Escalation, Issue and Action Plan Management, Data Quality and Risk Metrics.
BEHAVIOURAL SKILLS: Creativity & Innovation / Problem Solving, Adaptability, Ability to Deliver / Results Driven, Ability to collaborate / Teamwork.
TRANSVERSAL SKILLS: Analytical ability, Ability to develop and leverage networks, Ability to understand explain and support change, Ability to manage a project, Ability to develop and adapt a process, Ability to conduct a negotiation.
We'll include all as bullet list under Requirements.
Benefits: "W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment." So we can say: No PTO, no traditional benefits; ACA-compliant supplemental package available for enrollment.
Pay: "$70.00 - $77.50/hr".
Now produce HTML.
We must not include any extra text outside HTML fragment. Use
for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. Must not include Job ID etc. Must preserve all substantive info. Remove boilerplate like EEO, etc. Also remove application instructions. Must not include sections with filler like "commensurate with experience". Pay is given: $70.00 - $77.50/hr; W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment. So we have Pay and Benefits info. Benefits: "no Benefits" but ACA-compliant supplemental package available for enrollment. That's still a benefit? It says no Benefits, but supplemental package available. We can include Benefits section describing that. Schedule? Not mentioned. So omit Schedule.
We need sections: About the role (maybe description of role), Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay.
We must not invent content. Use info from posting.
Let's extract:
About the role: Could be the "Job Purpose" and "Business Area/Dept Overview". That's substantive.
Responsibilities: The list under "As an Operational Risk Officer your responsibilities will include:" and also "Core accountabilities of role". We'll combine.
Requirements: Might be "Knowledge, Skill and Experience:" plus "BUSINESS / IT SKILLS", "BEHAVIOURAL SKILLS", "TRANSVERSAL SKILLS". Those are requirements/qualifications. We'll separate maybe Requirements (knowledge/skill/experience) and Qualifications (maybe same). But we need to avoid thin sections. Could combine into one Requirements section covering all. But instructions: Use headings for each if content exists. We can have Requirements and Qualifications separate if distinct. However the posting lumps knowledge, skill, experience; business/it skills; behavioural skills; transversal skills. Could treat as Requirements. Qualifications maybe not separate. Could omit Qualifications if no distinct content. But we need to include only when posting has real specific content. There is content for skills etc. Could put them under Skills section. But we also have Skills heading. Might be redundant.
Better: Use sections: About the role, Responsibilities, Requirements (covering knowledge, skill, experience, business/it skills, behavioural, transversal), Benefits, Pay.
We must not include Qualifications if not distinct. Could still include Qualifications but would be thin. Safer to omit.
Now extract details.
About the role: Combine Business Area/Dept Overview and Job Purpose.
Let's craft a paragraph.
Responsibilities: bullet list from the responsibilities list and core accountabilities.
We need to preserve all substantive info; not invent or summarize away detail. Must keep details like specific activities: independent review, challenge, advisory support over 1LOD execution of third party risk management processes, including due diligence, risk assessment, ongoing monitoring, issue management, governance routines; partner with CIB Central teams on regional and global initiatives, framework enhancements, remediation programs, regulatory commitments, and process improvements related to third party and outsourcing risk; execute BAU check and challenge activities across risk and control self-assessments, key risk indicators, risk events, control testing outcomes, action plans, and governance materials; support preparation and review of management reporting, committee materials, regulatory updates, risk appetite metrics, and escalation packs related to third party risk and operational risk management; challenge adequacy of remediation plans, monitor progress against milestones, assess evidence of closure, escalate overdue or ineffective remediation; help ensure local practices remain aligned with applicable Group, regional, and CIB requirements for third party, outsourcing, operational resilience, and operational risk management. Also core accountabilities: Provide independent Operational Risk oversight, review, and challenge over CIB third party risk management activities, with a focus on the effective execution of 1LOD responsibilities and alignment with applicable policies, procedures, and risk appetite expectations; partner with CIB Central teams and other stakeholders on third party risk initiatives, including governance enhancements, control improvements, remediation programs, data quality improvements, and regulatory or audit-driven deliverables; execute BAU Operational Risk check and challenge activities, including review of risk assessments, control results, incidents, issues, action plans, metrics, and governance materials, ensuring that risks are clearly articulated, appropriately assessed, and escalated where required.
We'll combine but avoid duplication. Could list unique items.
Requirements: Knowledge, Skill and Experience list: Strong understanding of operational risk management, third party risk management, outsourcing governance, control frameworks, and the three lines of defence model within a financial services environment. Excellent analytical, communication, and stakeholder management skills, with the ability to provide effective challenge, influence outcomes, and explain risk and control matters clearly to both senior and working-level stakeholders. Third Party Risk Management: Experience reviewing or overseeing third party lifecycle activities, including inherent risk assessment, due diligence, contractual controls, ongoing monitoring, concentration risk, exit strategy, and issue remediation. Operational Risk Check and Challenge: Ability to assess the design and operating effectiveness of controls, identify control gaps, challenge risk ratings, and evaluate the adequacy of action plans and closure evidence. Governance and Reporting: Experience preparing, reviewing, and challenging management information, committee materials, risk appetite metrics, issue tracking, and senior management updates. Regulatory and Audit Awareness: Knowledge of regulatory expectations (including but not limited to US Interagency Third Party Risk Management Guidance), audit practices, and evidence standards relevant to third party, outsourcing, operational resilience, and operational risk management. Strong communication, stakeholder management, and business relationship skills, with the ability to connect technical teams with junior and senior business stakeholders.
BUSINESS / IT SKILLS list: Operational Risk Management, Third Party Risk Management, Outsourcing Governance, Risk and Control Assessment, Governance, Reporting and Escalation, Issue and Action Plan Management, Data Quality and Risk Metrics.
BEHAVIOURAL SKILLS: Creativity & Innovation / Problem Solving, Adaptability, Ability to Deliver / Results Driven, Ability to collaborate / Teamwork.
TRANSVERSAL SKILLS: Analytical ability, Ability to develop and leverage networks, Ability to understand explain and support change, Ability to manage a project, Ability to develop and adapt a process, Ability to conduct a negotiation.
We'll include all as bullet list under Requirements.
Benefits: "W2 contract, no PTO, no Benefits. ACA-compliant supplemental package available for enrollment." So we can say: No PTO, no traditional benefits; ACA-compliant supplemental package available for enrollment.
Pay: "$70.00 - $77.50/hr".
Now produce HTML.
We must not include any extra text outside HTML fragment. Use headings.
Structure:
About the role
About the role
...
Responsibilities
- ... ...
Requirements
- ... ...
Benefits
...
Pay
...
Make sure not to include empty sections. Now craft the About the role paragraph: combine Business Area/Dept Overview and Job Purpose. Business Area/Dept Overview: mission of RISK function etc. Job Purpose: position is for an Operational Risk Officer within RISK Americas, focused on supporting and strengthening third party risk management oversight across CIB. Provide independent Operational Risk check and challenge over the 1LOD Third Party program, etc. We'll write a concise paragraph preserving details. Let's draft: The RISK function provides senior management with full transparency and dynamic analysis of risks and clients managed by the operating divisions (Corporate and Institutional Banking, Retail Banking, Investment & Protection Services). In the US CIB, its scope covers market and liquidity risks, counterparty risks, and credit risks for financial institutions, sovereigns, wealth management and other private clients, and contributes to the group's risk appetite, risk decision‑making, and capital allocation. The role is an Operational Risk Officer within RISK Americas, focused on supporting and strengthening third‑party risk management oversight across CIB, providing independent operational risk check and challenge over the 1LOD third‑party program (governance, risk identification, control assessment, issue management, reporting, escalation) and partnering with CIB Central teams, business stakeholders, procurement, legal, compliance, technology, and other control functions to support third‑party risk initiatives, promote consistent framework application, and ensure material risks, control gaps, and remediation activities are identified, challenged, tracked, and escalated appropriately. That seems good. Now Responsibilities bullet list: combine unique items. I'll create bullets: - Provide independent review, challenge, and advisory support over 1LOD execution of third‑party risk management processes, including due diligence, risk assessment, ongoing monitoring, issue management, and governance routines. - Partner with CIB Central teams on regional and global initiatives, framework enhancements, remediation programs, regulatory commitments, and process improvements related to third‑party and outsourcing risk. - Execute business‑as‑usual (BAU) operational risk check and challenge activities across risk and control self‑assessments, key risk indicators, risk events, control testing outcomes, action plans, and governance materials. - Support preparation and review of management reporting, committee materials, regulatory updates, risk appetite metrics, and escalation packs related to third‑party risk and operational risk management. - Challenge the adequacy of remediation plans, monitor progress against milestones, assess evidence of closure, and escalate overdue or ineffective remediation where required. - Help ensure local practices remain aligned with applicable Group, regional, and CIB requirements for third‑party, outsourcing, operational resilience, and operational risk management. - Provide independent operational risk oversight, review, and challenge over CIB third‑party risk management activities, focusing on effective execution of 1LOD responsibilities and alignment with applicable policies, procedures, and risk appetite expectations. - Partner with CIB Central teams and other stakeholders on third‑party risk initiatives, including governance enhancements, control improvements, remediation programs, data quality improvements, and regulatory or audit‑driven deliverables. - Execute BAU operational risk check and challenge activities, including review of risk assessments, control results, incidents, issues, action plans, metrics, and governance materials, ensuring risks are clearly articulated, appropriately assessed, and escalated where required. We have some duplication (first bullet similar to later). Might be okay but we could consolidate. However we must preserve all substantive info; duplication may be okay but better to avoid redundancy. Let's try to merge similar points. We have two sets: first set from "As an Operational Risk Officer your responsibilities will include:" (six bullets). Second set from "Scope and scale of role: Core accountabilities of role" (three bullets). Some overlap. We can combine into a unified list without losing info. Let's list unique responsibilities: 1. Provide independent review, challenge, and advisory support over 1LOD execution of third‑party risk management processes, including due diligence, risk assessment, ongoing monitoring, issue management, and governance routines. 2. Partner with CIB Central teams on regional and global initiatives, framework enhancements, remediation programs, regulatory commitments, and process improvements related to third‑party and outsourcing risk. 3. Execute BAU operational risk check and challenge activities across risk and control self‑assessments, key risk indicators, risk events, control testing outcomes, action plans, and governance materials. 4. Support preparation and review of management reporting, committee materials, regulatory updates, risk appetite metrics, and escalation packs related to third‑party risk and operational risk management. 5. Challenge the adequacy of remediation plans, monitor progress against milestones, assess evidence of closure, and escalate overdue or ineffective remediation where required. 6. Help ensure local practices remain aligned with applicable Group, regional, and CIB requirements for third‑party, outsourcing, operational resilience, and operational risk management. 7. Provide independent operational risk oversight, review, and challenge over CIB third‑party risk management activities, focusing on effective execution of