Risk Management Senior Associate

Position Summary

Reporting to the Senior Vice President, Head of Risk Management, this Operational Risk Professional will have an important role in advancing the enterprise risk management program of a fast-growing financial services firm. This role will work closely with business stakeholders to proactively identify, assess, and mitigate risks across the organization’s lifecycle, with a particular focus on third-party relationships, technology, and business operations. Serving as a critical Second Line of Defense (2LoD), this role provides independent oversight and effective challenge to the business.

This role can be located in St. Louis, MO; Boston, MA; New York, NY

Primary Responsibilities

• Risk Assessment & Execution (RCSA): Lead and execute Risk and Control Self-Assessments (RCSA), IT risk assessments, and control evaluations. Conduct due diligence for third-party vendors.
• Independent Review & Challenge: Assess internal operational risk events, loss data, and emerging threats to ensure a robust control environment for individual business units.
• Monitoring & Reporting (KRI/Loss Data): Define and manage Key Risk Indicators (KRIs). Analyze operational risk exposure, track loss events, and prepare executive-ready presentations and heat maps for senior leadership. Connect issues to controls and drive resolution.
• Business Resiliency & Technology Oversight: Oversee and challenge Business Continuity and Disaster Recovery (BC/DR) planning and testing. Monitor core technology processes, including change management, cloud governance, disaster recovery, and the data management lifecycle.
• Tool Administration: Serve as primary owner and administrator of the GRC platform, ensuring accurate, timely, and complete data across risk, controls, issues, and reporting.

Qualifications

• Experience: 5+ years of experience in Operational Risk, Third-Party Risk (TPRM), or Compliance within the Banking or Financial Services (Brokerage/RIA) industry. Thrive in a fast-paced, dynamic environment where foundational capabilities are being designed and scaled.
• Education: Bachelor’s Degree in Business Administration, Risk Management, Finance, or a related field.
• Regulatory Knowledge: Understanding of risk management frameworks (e.g., NIST, COSO) and Interagency Guidance on Third-Party Relationships.
• Analytical Prowess: Proven ability to interpret complex data, identify emerging risk trends, and conduct root-cause analysis on operational incidents.
• Influencing Skills: Demonstrated "confidence to challenge" senior leadership and build cross-functional partnerships across Business, Operations, Technology.
• Technical Proficiency: Advanced skills in Microsoft Office Suite (especially Excel/PowerPoint). Familiarity with GRC tools (e.g., Auditboard, ServiceNow) is a plus.

This is an exempt position. The annualized base pay range for this role is expected to be between $100,000-$145,0000.  Actual base pay could vary based on factors including but not limited to experience, subject matter expertise, geographic location where work will be performed, and the applicant's skill set.  The base pay is just one component of the total compensation package for employees.  Other rewards may include an annual cash bonus and a comprehensive benefits package, including but not limited to medical, dental, vision, life insurance, and 401(k). Please note that the job title is subject to change based on the selected candidate’s experience and education.