Risk Analyst/Outsourced Risk Management

General Description

This position is responsible for the development, establishment, and oversight/monitoring of the operational risk framework of Popular in its various components (e.g. risk and control self-assessments, outsourcing risk management, business continuity/disaster recovery, key risk indicators, operational and potential losses). This position is also responsible for the management of various risks and proposes remedies to minimize risk exposures and strengthen the overall control environment. This position will report to the Operational Risk supervisor.

Essential Duties and Responsibilities

•    Identify, assess, analyze, measure, report to committees and working groups, and monitor outsourcing or vendor management risks on a regular basis within the overall operational risk management framework.
•    Participate in outsourcing risk focused meetings, including Popular’s Management Committee’s Operational Risk Committee (ORCO) and Working Groups, as a representative of 2nd line of defense, as required.  
•    Work closely with Service Providers Relationship Officer (SPRO) in the business lines to prevent and address issues with service providers until remediation. Addressing issues could include establishing clear escalation procedures or adhering to existing guidelines.  
•    Facilitate and challenge over 100 risk assessments and due diligence processes to ensure that service details and risks are fully documented, meet regulatory requirements, and encourage mitigation of exposures to the bank. 
•    Meet with key accountable stakeholders and provide robust and challenging insight analysis on outsourcing oversight risk and control processes.
•    Support all Popular’s business units and/or operational risk management in the discussion and resolution of audits’ recommendations. This support could include providing evidence, explaining procedures, discussing discrepancies in point of view, etc. 
•    Review the established policies, standards, and guidelines to incorporate new guidelines and best practices used to assess the outsourcing risk management risks. Develop, revise and/or continuously improve ORMP procedures, and/or manuals to train business units’ liaisons, and to incorporate lessons learned from incidents, new developments, and practices.
•    Stay abreast of evolving regulations and raise awareness of the outsourcing risk program requirements through periodic and ad-hoc communication.

Education

Bachelor’s degree in Business Administration or related fields. Information Technology, Computer Sciences, Law/Juris Doctor, Finance, Accounting or Industrial Engineering.

Experience

 Preferably three years of related experience in operational risk, vendor management, internal audit and compliance.

Additional Information

•    Risk Management background is essential
•    Strong project management skills.
•    Advanced PC skills (MS Excel, PowerPoint, SharePoint, Word etc.).
•    Ability to work with a high degree of accuracy and attention to detail.
•    Ability to work in a fast-paced environment both independently and in a team setting.
•    Strong organizational skills and ability to work on multiple projects.
•    Ability to manage and prioritize projects and changing deadlines
•    Ability to maintain confidential information.
•    Ability to design and provide trainings to users.
•    Ability to plan and coordinate with different internal users and external providers.
•    Strong business writing and verbal communication (and presentation) skills; in both Spanish and English.
•    Ability to communicate with all levels of the organization.
•    Customer service oriented.
•    Results oriented with sound decision making ability.
•    Understanding of banking regulatory requirements.

Values