Associate Principal, Operational Risk Management and Controls

The Options Clearing Corporation; Chicago (IL); On-site; USD 98,000 - 142,000; Full time

Benefits offered by this job

Hybrid work

Tuition reimbursement

Student loan repayment assistance

Technology stipend

Generous PTO and parental leave

Job summary

The Options Clearing Corporation (OCC) seeks an IT & Security Risk Senior Analyst to support the Director of Operational Risk. You will assist with risk assessments, coordinate ORM activities across IT, Security, and Compliance, and help strengthen risk management frameworks enterprise-wide.

In this role, you will maintain risk inventories, report to regulators, and contribute to risk program enhancements. Chicago office 3 days/week with a hybrid work setup and competitive compensation.

Qualifications

• Advanced understanding of IT risk and Security risk with intermediate Operational risk.
• Ability to act as a trusted advisor and provide effective challenge.
• Creative, independent thinker with willingness to develop and drive ideas.
• Excellent written, verbal and presentation skills.
• Team oriented with cross-department collaboration capabilities.
• Ability to work under pressure and with tight deadlines.

Responsibilities

• Collaborate with IT, Security, TPRM, Legal, Compliance, and Internal Audit to strengthen IT and Security risk management.
• Lead risk identification and assessment process (Risk Intake) for IT, Security and business risks.
• Drive adherence to risk identification frameworks and standards.
• Maintain risk inventories, taxonomies, and supporting elements.
• Lead and execute IT & Security risk assessment aligning to regulatory requirements.
• Ensure issues are reported and remediated to reduce risk.
• Generate Archer data reports for regulators and stakeholders.
• Help automate IT & Security risk oversight.
• Communicate results to governance committees and leadership.
• Collaborate on ORM methodologies, policies, and program activities.

Skills

IT risk

Security risk

Operational risk

Advising/ challenging

Written/verbal/presentation

Education

Bachelor’s Degree in Finance/Business/IS/CS

Tools

Archer eGRC

MS Word/Excel/Access/PowerPoint

Job description

Eligibility and Application Instructions

To be considered for this position, applications and resumes are accepted only through our careers site by directly applying to the posted job. We do not accept unsolicited resumes or sales solicitations from staffing agencies. Any OCC employee wishing to submit a referral must do so through their Workday account. Any resume submitted outside of an active job posting will not be considered for employment.

What You’ll Do

This role will provide critical support to the Director of Operational Risk to evaluate IT and Security risks by assisting with risk assessments and applying aspects of the risk management framework across the process, risk, and control universe. Additionally, this role will help with the risk assessment program activities, coordinate with other functions (e.g. IT, Security, TPRM, Legal, Compliance, and Internal Audit) and facilitate appropriate ORM governance to ensure alignment to OCC strategy and short-term objectives. The Operational Risk Management (ORM) department identifies, measures, monitors, and reports risks and exposures across the organization through the Risk Management Framework, and specifically through several risk programs, including but not limited to: Enterprise Risk Assessments (ERA) , Risk Event Analysis, Scenario Analysis, Key Risk Indicators, and Risk Reporting. The ORM team is a dedicated group of professionals focused on developing and executing second line of defense oversight responsibilities for OCC.

Primary Duties & Responsibilities

• Collaborate with IT, Security, TPRM, Legal, Compliance, and Internal Audit to ensure that ORM contributes to strengthening the overall effective management of IT and Security risk across the organization.
• Lead the OCC’s risk identification and assessment process (Risk Intake) for IT, Security and business risks, and verify the consistency and reliability of the associated frameworks and systems.
• Drive adherence to methodologies, guidance, and standards applicable to risk identification and assessment frameworks.
• Maintain risk inventories, taxonomies, and other elements supporting IT & Security risk management and compliance activities.
• Lead and execute the IT & Security risk assessment process, while aligning to the risk and control universe, and regulatory requirements and expectations.
• Ensure issues are properly reported to business areas and remediated appropriately to reduce outstanding risk or performance breakdowns.
• Generate reports of Archer data for various stakeholders, including regulators.
• Help automate IT & Security risk oversight.
• Communicate results of risk assessments to governance committees, business owners, and various levels of leadership.
• Collaborate on the enhancement and maintenance of ORM program methodologies, policies, procedures, and job aides, including the development of new program activities.
• Track and update ORM team internal findings, external exam issues, and business area self-identified issues resulting from Enterprise Risk Assessment.

Supervisory responsibilities: None

Are the essential duties of this job required to be performed in an OCC office location? Yes – Chicago office 3 days/week

Qualifications

Required

• Advanced understanding of IT risk, Security risk, and intermediate understanding of Operational risk
• Ability to act as a trusted advisor and provide effective challenge
• Creative, independent thinker, with a willingness to develop and drive new ideas
• Excellent written, verbal and presentation skills
• Must be team-oriented and be able to collaborate effectively in department and cross-departmental efforts
• Ability to work under pressure and with tight deadlines

Preferred

• Familiarity with Financial Market Utilities; securities and derivatives markets
• Ability to work in a highly regulated environment, including with the SEC, CFTC, and Federal Reserve; Familiarity with the Covered Clearing Agency regulations

Technical Skills & Background

• Proficient in Microsoft Word, Excel, Access, and PowerPoint
• Experience with eGRC systems (e.g., Archer)

Education & Training

• Bachelor’s Degree in Finance, Business, Information Systems, Computer Science (or equivalent) preferred
• 3+ years of experience in enterprise risk, technology risk, security risk, or risk consultancy, specifically with focus on assessing IT and Security risk

Certificates or Licenses

• Certification such as: CPA, CISSP, Security+, CSX-P, CET, CISA or CISM

About Us

The Options Clearing Corporation (OCC) is the world's largest equity derivatives clearing organization. Founded in 1973, OCC is dedicated to promoting stability and market integrity by delivering clearing and settlement services for options, futures and securities lending transactions. As a Systemically Important Financial Market Utility (SIFMU), OCC operates under the jurisdiction of the U.S. Securities and Exchange Commission (SEC), the U.S. Commodity Futures Trading Commission (CFTC), and the Board of Governors of the Federal Reserve System. OCC has more than 100 clearing members and provides central counterparty (CCP) clearing and settlement services to 19 exchanges and trading platforms. More information about OCC is available at www.theocc.com.

Benefits

• A hybrid work environment, up to 2 days per week of remote work
• Tuition Reimbursement to support your continued education
• Student Loan Repayment Assistance
• Technology Stipend allowing you to use the device of your choice to connect to our network while working remotely
• Generous PTO and Parental leave
• 401k Employer Match
• Competitive health benefits including medical, dental and vision

Compensation

Salary Range $98,100.00 - $142,000.00 Incentive Range 8% to 15% This position is eligible for an annual discretionary incentive compensation award, for which the target range is listed above (see Incentive Range). The amount of such award, if any, will be based on various factors, including without limitation, both individual and company performance.

OCC is an Equal Opportunity Employer

We are an equal opportunity employer that is committed to diversity, equity, and inclusion. OCC provides equal employment opportunities to all employees and applicants for employment without regard to race, color, national origin, citizenship status, sex, sexual orientation, gender identity or expression, disability, age, marital status, religion, veteran status, or any other characteristics protected by applicable federal, state, or local laws.

Numerous studies have shown that people from certain groups are less likely than others to apply to jobs if they believe they do not meet 100% of the requirements. We encourage everyone to review our open positions and apply if you think your experience may be a match, even if you do not meet all of the qualifications. Your perspective may be an element we need to continue building innovative solutions to support the markets and market participants we serve.

Reasonable accommodations may be made to enable individuals with disabilities to perform the primary functions.

Visit https://www.theocc.com/careers/thriving-together for more information.