Head of Operational Risk

Mediolanum International - Ireland; Dublin; On-site; EUR 140,000 - 210,000; Full time

Job summary

Mediolanum International - Ireland is seeking an experienced Head of Operational Risk to lead the Risk Function across our Irish entities and align with group policies.

The role requires senior experience in risk and control, regulatory awareness (UCITS/AIFMD), and the ability to drive risk framework, reporting to the board, and collaboration with Group Risk.

Qualifications

• Minimum 10 years’ work experience in financial services with 5 years in operational risk.
• Strong understanding of UCITS regulations; knowledge of EU insurance standards is a plus.
• Experience presenting to senior executives and regulatory interactions.

Responsibilities

• Own and continuously improve the Operational Risk Framework for the group entities.
• Lead and develop the local risk function and coordinate with Group Risk.
• Act as the Designated Person for Operational Risk (PCF39B/DP) where approved.
• Ensure regulatory compliance and alignment with group risk requirements.
• Oversee risk identification, assessment, and management across functions.
• Prepare risk reports for the board and internal committees.

Skills

Operational risk

Leadership

Regulatory liaison

Analytical thinking

Strategic planning

Communication

Education

Degree or postgraduate degree

Operational Risk qualification (e.g., PRMIA/ISO27001)

Tools

Microsoft Office

GRC tools

Job description

We are seeking an experienced operational risk professional to join Mediolanum as Head of Operational Risk. The successful candidate will be responsible for leading our Operational Risk Function to build upon and improve our existing processes to help foster a positive Operational Risk culture across our businesses.

This role will be centred on both our Irish entities Mediolanum International Life Ltd & Mediolanum International Funds Ltd. and on ensuring that the Operational Risk framework for both entities aligns with industry best practice and the existing and newly released Group policies.

As part of the Risk team, the role holder will interact with all the business teams and represent the Irish operations in matters relating to operational risk engaging with the Group Risk function of the Mediolanum Banking Group.

The successful candidate will already have gained significant senior experience in risk and control matters, ideally within a UCITS or AIFMD regulated entity. He or she would display skill, energy and passion so as to gain a rapid understanding of the operational risk and control aspects of our different business lines, and to be part of a growing team implementing our risk strategy and philosophy across the organisation. It is expected that the successful candidate would be able to be approved by the Central Bank of Ireland to act as Designated Person with responsibility for Operational Risk Management (PCF39B).

Duties and responsibilities will include, but not limited to the following:

• Operational Risk Framework Ownership: Assume the ownership and continuous improvement of the Operational Risk Framework, ensuring the integration of best practices and fostering an Operational Risk culture within the business.
• Team Management: Manage and coordinate the operational risk team to ensure all deliverables are met efficiently and effectively.
• Designated Person for Operational Risk: Act as the designated person for operational risk, responsible for overseeing all aspects of operational risk management and ensuring alignment with organizational goals and regulatory requirements for MIFL.
• Regulatory Compliance: Ensure that Mediolanum’s Operational Risk Framework consistently meets regulatory and Mediolanum Group Risk requirements.
• Risk Management: Oversee continuous risk identification, assessment, and management, including gap analysis, action plan creation, and enhancement of risk management processes. Specific attention to be given to matters relating to: IT Risk Assessment and Business Continuity Management, Operational Resilience and the deliverables of the Digital Operational Resilience Act, Outsourcing and Third Party Oversight, Reputational Risk and Conduct Risk.
• Loss Event Oversight: Oversee the identification, analysis, and reporting of operational risk loss events to ensure timely resolution and mitigation of risks. Lead thematic reviews if necessary to address recurring issues and improve risk management practices.
• Reporting: Prepare and deliver comprehensive Operational Risk reports to the board of directors of MIFL and MIL and the Mediolanum Group Operational Risk function and actively participate in relevant internal committees.
• Support and Analysis: Provide ongoing Operational Risk support and analysis to senior managers, particularly in relation to business developments and regulatory changes.
• Control Assurance: Conduct thorough Operational Risk assessments of key business functions and critical outsourcers across both entities, ensuring a robust operational control framework is in place to manage risks effectively and facilitate RCSA workshops
• Strategic Project Oversight: Manage and contribute to Operational Risk or organization-wide projects as appropriate, including conducting comprehensive project risk assessments to identify, evaluate, and mitigate potential risks throughout the project lifecycle.
• Risk Training Programs: Develop and implement risk training programs to educate employees on operational risk management practices and ensure compliance with regulatory requirements and help embed a risk aware culture .
• Risk Communication: Establish and maintain effective communication channels to ensure timely and accurate dissemination of risk-related information across the organization.

Skills and Competencies:

• Quick Learner and Assertive: Demonstrates the ability to both follow instructions and also act independently when appropriate, showcasing a proactive approach to tasks.
• Leadership and Collaboration: Capable of leading and developing the local operational risk function as it grows across the business and of working collaboratively with other local business owners and the Mediolanum Banking Group Risk function to achieve common goals.
• Highly Organized: Exhibits strong organizational skills, effectively managing multiple priorities, routine work, and urgent issues as they arise. Focuses on resolving issues proactively and in a timely manner.
• Attention to Detail: Displays attention to detail in all aspects of work and relationships, ensuring accuracy and quality.
• Independent Project Management: Able to work independently on large projects that are key to the development and progression of the overall Risk Team.
• Relationship Management: Skilled in developing and managing relationships both internally and externally with Group Risk function, fostering positive interactions and collaboration.
• Communication Skills: Possesses excellent verbal, written, and numeric skills, effectively conveying information and ideas.
• Technical Proficiency: Self-sufficient in the use of Microsoft Office, GRC tools, and other relevant software.

Qualifications and Experience:

• Degree or Postgraduate degree a minimum requirement.
• Appropriate professional development in the Operational Risk field with a preference for a formal Operational Risk qualification such as PRMIA’s ORM and / or IT Risk qualification as ISO27001
• Minimum of 10 years’ work experience in a financial services environment, with at least 5 years in the Operational Risk area with a strong understanding of UCITS regulations and with a preference to candidates that would also possess knowledge of EU insurance regulations and retail products, to cover risk assessment, policy management and claims management.
• Understanding of Front, Middle and Back Office controls in an asset management and/or investment firm environment
• Awareness of financial services products (including Bonds /Equities / Derivatives) and knowledge of the regulatory environment as it pertains to the asset management industry.
• Experience of presenting to senior executive and/or Board-level committees and engagement with regulatory authorities. Existing experience as an approved role holder (either PCF and/or DP, or equivalent) is preferred, but not required.