Senior Manager Operational Risk Management

Haventree Bank; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

Haventree Bank, a Toronto-based private Canadian Schedule 1 bank, seeks a Senior Manager of Operational Risk Management to lead the ORM program and ensure regulatory compliance across the organization.

Reporting to the Director of Enterprise Risk Management, this role oversees pRCSA, BCM, IT & Cyber Security risk oversight, incident management, risk culture, and reporting to SMT & ELT. Collaboration with business units and a focus on proactive risk management are essential.

Qualifications

• Minimum 5 years in a risk management role.
• University degree in Business, Finance, Risk Management or related field.
• Strong understanding of regulatory requirements and risk forums.
• In-depth knowledge of risk frameworks and methodologies.
• Excellent communication and collaboration with leadership and teams.
• Strong project management and ability to lead multiple initiatives.
• Experience with KPI/KRI development.
• Able to engage with internal and external contacts professionally.

Responsibilities

• Lead the enterprise operational risk program (pRCSA, BCM, IT risk, incident management).
• Enhance risk framework, policies, and program maturity.
• Ensure OSFI E-21 compliance through risk framework design and management.
• Provide effective challenge to first line and align with risk appetite.
• Collaborate with first line on risk reporting and control framework.
• Review and validate design and effectiveness of risks and controls.
• Implement ORM best practices across the organization.
• Develop root cause analysis for risk incidents.
• Monitor and report KRIs and risk metrics.
• Support audit processes with information and oversight.
• Promote risk culture and ongoing staff training.

Skills

Risk management

Regulatory knowledge

Project management

Stakeholder engagement

Leadership

Education

University degree in Business/Finance/Risk Management

Job description

Haventree Bank is a private Canadian Schedule 1 bank specializing in alternative mortgage programs and insured GIC deposits. We help hardworking Canadians from coast‑to‑coast achieve homeownership by offering flexible mortgage solutions. Our insured GIC deposits offer competitive rates and are available through a variety of wealth management platforms.

About Haventree Bank

Headquartered in Toronto, Ontario, Haventree Bank (Haventree) is a mission‑driven alternative mortgage lender. The name Haventree is representative of the bank’s mission to help its customers find a place of refuge and to lay down new roots for the future. Haventree exists to be a catalyst of financial security and upward mobility for Canadians who are underserved by the traditional financial system.

Position Summary

Reporting to the Director of Enterprise Risk Management, the Senior Manager of Operational Risk Management (ORM) is responsible for overseeing the operational risk management of the Bank, including and not limited to the effectiveness and enhancement of programs and their continued adherence to regulatory requirements. The Senior Manager proactively engages stakeholders across the organization to monitor, assess and report on various risks to the company. The role includes a combination of project initiatives, framework development, risk assessment, risk review and monitoring. In delivering on the ORM program, the Sr. Manager works closely with Business Unit heads, SMT & ELT across the company to enhance operational risk management practices and reporting.

Major Duties & Responsibilities

• Lead the enterprise operational risk management program, including pRCSA (development and rollout), Business Continuity Management, IT & Cyber Security risk oversight, incident management, risk acceptances, Risk Culture, and change management.
• Enhance the operational risk management framework, policies and procedures to ensure continuous improvement and program maturity across the organization.
• Ensure compliance with OSFI’s E‑21 Operational Resilience guideline through the design, implementation, and management of the bank’s operational risk management framework.
• Provide oversight and effective challenge to the work performed by the first line of defense, ensuring alignment with risk appetite and operational resilience.
• Partner with the first line of defense for risk assessment, reporting activities, and maintaining the Risk and Control framework.
• Independently review and validate the design and operating effectiveness of various operational risks and controls.
• Implement ORM best practices throughout the organization.
• Develop root cause analysis and provide risk oversight on operational risk incidents.
• Support the development, monitoring, and measurement of key risk indicators (KRIs).
• Gather information, design and format data for regular and ad‑hoc reporting, ensuring accurate and timely information.
• Monitor and report on operational risk metrics, including RCSA, Operational Loss incidents, internal audit findings, Fraud Risks, IT Security risks, and BCM activities.
• Training and Development: Ensure continuous education and training for staff on operational risk management practices.
• Promote a strong risk culture across the organization, emphasizing the importance of risk awareness and proactive management.
• Responsible for the design, execution and oversight of risk and control assessment programs, including testing, challenge and validation of controls.
• Provide effective second‑line oversight on technology operations, cybersecurity controls, and incident management.
• Design and implement the annual business continuity planning and testing exercises to encompass OSFI E‑21 Operational Resiliency expectations.
• Support internal and external audit processes by providing necessary information and oversight.

Qualifications & Experience

• The position requires a minimum of 5 years work experience in a Risk Management role.
• The position requires a university degree with a focus in one or more of: Business, Finance, Risk Management, Statistics, Accounting or a similar field.
• Strong understanding of regulatory requirements and experienced in providing actively engage/participate in relevant risk forums.
• In‑depth knowledge of risk management frameworks and methodologies.
• Strong project management skills and experience. Will manage multiple initiatives across many different teams.
• Have in depth experience building, maintaining and reviewing risk and control frameworks and their inputs.
• Have experience building, reviewing, or challenging key performance indicators (KPI) and key risk indicators (KRI).
• Demonstrated ability to deal comfortably with all levels of both internal and external contacts with a friendly, professional attitude.
• Excellent communication and collaborator leadership skills, with the ability to influence and work with senior leadership, technical teams, and other collaborators.
• The position requires strong written and verbal communication skills and exceptional organization and time management skills.

Equal Opportunity Statement

Haventree Bank embraces equal opportunity, diversity, and inclusion. Please let us know if you require accommodations during the recruitment and selection process.