Senior Operational Risk Leader — Growth-Driven Bank

Brocc; Stockholms kommun; On-site; Full time

Job description

Brocc is a specialised niche bank embarking on a bold and transformative growth journey, fueled by strong institutional backing and a clear strategic vision. Positioned at the forefront of the European credit market, Brocc combines deep heritage in consumer finance with cutting‑edge technology and expertise in NPL acquisition and restructuring, building a best‑in‑class debt finance platform that supports clients across the full credit lifecycle.

With substantial capital resources, an ambitious growth agenda, and a collaborative, entrepreneurial culture, Brocc is uniquely placed to shape the future of the credit ecosystem. As we scale across new markets and asset classes, building a robust, forward‑looking risk function is central to how we operate, and to how we earn the trust of clients, partners, and supervisors.

Now, we're looking for an Operational Risk Manager to join our growing team and take ownership of how we identify, assess, and manage operational risk across the organisation.

What you'll do

You'll lead the second‑line operational risk function, partnering with the business to design and embed an operational risk framework that scales with us. In practice, that means:

• Owning and evolving the operational risk framework (policies, taxonomy, appetite, and methodology) in line with CRR, EBA guidelines, and supervisory expectations
• Running the RCSA process across the bank, working with first‑line owners to identify and assess key risks and controls
• Designing and tracking KRIs and risk indicators that give leadership and the Risk Committee a clear, forward‑looking view
• Leading incident and loss‑event management: capturing root causes, driving remediation, and turning incidents into framework improvements
• Overseeing ICT risks, third‑party, and operational resilience risk in close partnership with IT, InfoSec, Procurement, and Compliance
• Reviewing material changes (new products, outsourcing arrangements, system changes) and giving second‑line challenge before they go live
• Reporting to the CRO, Risk Committee, and Board on operational risk posture, emerging risks, and the state of the control environment
• Building risk awareness across the organisation through training, clear communication, and being a trusted partner, not a blocker

Who you are

You've built operational risk frameworks in regulated financial institutions and know how to make them practical, not bureaucratic. You're as comfortable challenging a process owner as you are presenting to the Board, and you bring the judgment to know when to push and when to partner.

More specifically, you bring:

• Significant experience in operational risk management within a bank, fintech, or other regulated financial institution
• Strong working knowledge of the EU regulatory landscape: EBA guidelines, CRR/CRD, DORA, and the operational risk and resilience expectations that flow from them
• Practical experience with RCSA, KRI design, incident management, and second‑line challenge
• Familiarity with ICT risks and third‑party risk, and how operational resilience fits into the broader framework
• Excellent communication skills, with the ability to translate risk into clear, decision‑ready insight for senior stakeholders
• A pragmatic, hands‑on mindset: you're happy to roll up your sleeves and build, not just review
• Fluent English; Swedish or another Nordic language is a plus

Why Brocc?

We're a ~50‑person team backed by Cerberus Capital Management, with local presence in Stockholm, Helsinki, and London and operations across 15 European markets. You'll join at a pivotal moment in our growth, with real ownership of your area and direct visibility to senior leadership, including the CRO, CEO, and Board. We move fast, we value people who take initiative, and we're building a credit institution that genuinely changes how consumers and counterparties experience finance.