Senior Risk Officer (SRO)
Responsibilities:
Operational Risk Management:
Identify, assess, and monitor operational risks across business units, processes, and functions. Conduct Risk and Control Self-Assessments (RCSAs) and recommend mitigation strategies. Develop and maintain the organization's operational risk register. Monitor Key Risk Indicators (KRIs) and Key Control Indicators (KCIs) to identify emerging risks. Investigate operational incidents, perform root cause analysis, and recommend corrective actions. Review and strengthen internal controls, policies, and Standard Operating Procedures (SOPs). Coordinate business continuity planning and disaster recovery testing. Support business process reviews to improve operational efficiency and reduce risk exposure.
Strategic Risk Management:
Support the implementation of the Enterprise Risk Management (ERM) framework. Assess strategic initiatives, new business opportunities, and projects from a risk perspective. Evaluate risks associated with organizational growth, expansion, digital transformation,
and new products. Conduct scenario analysis and stress testing to assess potential business impacts. Monitor external market trends, geopolitical developments, and emerging risks that could affect business performance. Provide risk assessments to support executive and strategic decision-making. Prepare strategic risk reports for Executive Management and Board Committees.
Regulatory & Compliance Risk:
Monitor compliance with applicable regulatory requirements, including SEC regulations and other relevant financial services regulations. Conduct regulatory risk assessments and ensure appropriate mitigation measures are implemented. Review internal policies to ensure alignment with regulatory requirements and industry
best practices. Support regulatory inspections, audits, and compliance reviews. Track changes in legislation and advise management on emerging regulatory obligations. Work closely with Compliance, Legal, and Internal Audit teams to strengthen governance frameworks. Promote awareness of regulatory requirements through risk training and stakeholder engagement.
Investment Risk Management:
Monitor market, liquidity, credit, concentration, and counterparty risks across investment portfolios. Review investment proposals to ensure they align with the firm's risk appetite and investment policies. Assess risks associated with new investment products and alternative asset classes. Monitor portfolio risk limits and escalate breaches promptly. Support investment teams with quantitative and qualitative risk assessments. Produce investment risk reports and dashboards for senior management. Conduct stress testing and scenario analysis on investment portfolios.
Technology Risk & Data Analytics:
Utilize technology and analytics tools to automate risk monitoring and reporting. Develop interactive dashboards and risk reports using Power BI or similar tools. Assess technology-related risks, including cybersecurity, data privacy, and third-party/vendor risks. Collaborate with Technology teams to strengthen IT controls and information security practices. Monitor digital transformation initiatives to ensure risks are identified and appropriately managed. Support the implementation and optimization of Governance, Risk, and Compliance (GRC) systems.
Requirements:
Bachelor's degree in Finance, Accounting, Economics, Business Administration, Computer Science, Information Technology, Risk Management, Engineering, or a related discipline. A Master's degree (MBA, Finance, Risk Management, Information Security, or related field) is an advantage. 6–8 years of experience in enterprise risk management, operational risk, investment risk, compliance, internal audit, or financial risk within the financial services or investment industry. Experience in investment management, private equity, venture capital, asset management, banking, or fintech is highly desirable. Demonstrated experience implementing enterprise risk frameworks and preparing risk reports for senior leadership. Strong understanding of technology risk, data analytics, and digital transformation initiatives. Experience using Power BI, Excel, and GRC platforms to support risk reporting and decision-making.