Operational Risk Advisor

Jobtailor; Arizona; On-site; USD 90,000 - 150,000; Full time

Job summary

Jobtailor in the United States (Arizona) is seeking an experienced risk professional to assess changes for SOC 1 and SOX impact, act as a second-line risk advisor, and lead formal change risk assessments. You will document control updates, coordinate RACMs, and collaborate with owners to ensure practical, sustainable controls aligned with audit expectations.

The role emphasizes strong documentation, cross‑functional partnership, and ongoing governance reporting to improve risk management and

Qualifications

• High School Diploma or GED required.
• Bachelor’s degree in Accounting, Business, Risk Management, or a related field.
• Certifications preferred (not required): CIA, CPA, CISA, CRISC, or similar risk credentials.
• 4+ years of experience in operational risk, controls, audit, compliance, or governance roles.
• Hands-on experience supporting SOC 1 and/or SOX control environments.
• Demonstrated experience assessing change impacts to controls, processes, or systems.
• Strong documentation skills, including RACMs, control narratives, and risk assessments.
• Ability to partner effectively with project teams, business leaders, and technology stakeholders.
• Excellent written and verbal communication skills, with the ability to influence without authority.

Responsibilities

• Assess organizational, process, system, vendor, and initiative‑related changes for impacts to SOC 1 and SOX control design and operating effectiveness.
• Serve as a second‑line operational risk advisor to business, IT, and project teams, providing guidance on control implications of proposed and approved changes.
• Lead formal change risk and control impact assessments; document required control updates, new controls, mitigating actions, or compensating controls.
• Coordinate updates to control narratives, RACMs, ownership assignments, and evidence expectations resulting from approved changes.
• Partner with control owners to ensure control updates are practical, sustainable, and aligned with risk severity and audit expectations.
• Ensure change‑related risks, decisions, and approvals are captured, tracked, and reported through established risk and governance forums.
• Identify and escalation potential control degradation, design gaps, or operating effectiveness concerns arising from changes.
• Support audit readiness by maintaining clear documentation, traceability, and rationale for control decisions associated with change activity.
• Collaborate with Technology, Controls, and Audit partners to ensure consistent application of change risk standards and methodologies.
• Contribute to reporting and dashboards related to change volume, control impact themes, and residual risk trends.

Skills

Operational Risk

Control Assessment

Audit Compliance

Risk & Control Matrices

Change Risk Standards

Control Design

Control Effectiveness

Documentation Skills

Change Management

Risk Governance

Education

High School Diploma or GED

Bachelor’s degree in Accounting, Business, Risk Management, or related field

Certifications: CIA, CPA, CISA, CRISC

Job description

Responsibilities

• Assess organizational, process, system, vendor, and initiative‑related changes for impacts to SOC 1 and SOX control design and operating effectiveness
• Serve as a second‑line operational risk advisor to business, IT, and project teams, providing guidance on control implications of proposed and approved changes
• Lead formal change risk and control impact assessments; document required control updates, new controls, mitigating actions, or compensating controls
• Coordinate updates to control narratives, Risk & Control Matrices (RACMs), ownership assignments, and evidence expectations resulting from approved changes
• Partner with control owners to ensure control updates are practical, sustainable, and aligned with risk severity and audit expectations
• Ensure change‑related risks, decisions, and approvals are captured, tracked, and reported through established risk and governance forums
• Identify and escalation potential control degradation, design gaps, or operating effectiveness concerns arising from changes
• Support audit readiness by maintaining clear documentation, traceability, and rationale for control decisions associated with change activity
• Collaborate with Technology, Controls, and Audit partners to ensure consistent application of change risk standards and methodologies
• Contribute to reporting and dashboards related to change volume, control impact themes, and residual risk trends

Requirements

• High School Diploma or GED required
• Bachelor’s degree in Accounting, Business, Risk Management, or a related field
• Certifications preferred (not required): CIA, CPA, CISA, CRISC, or similar risk credentials
• 4+ years of experience in operational risk, controls, audit, compliance, or governance roles
• Hands‑on experience supporting SOC 1 and/or SOX control environments
• Demonstrated experience assessing change impacts to controls, processes, or systems
• Strong documentation skills, including RACMs, control narratives, and risk assessments
• Ability to partner effectively with project teams, business leaders, and technology stakeholders
• Excellent written and verbal communication skills, with the ability to influence without authority.

Core Competencies

Demonstrates expertise in operational risk management, control assessments, and compliance with SOC 1 and SOX standards. Proficient in documentation and collaboration with cross‑functional teams to ensure effective risk governance and audit readiness.

Highest‑signal resume keywords

• Operational Risk Management
• SOC 1 Control Environment
• SOX Compliance
• Risk Assessment Documentation
• Change Impact Assessment

ATS Optimization Keywords

Hard Skills

• Operational Risk
• Control Assessment
• Audit Compliance
• Risk & Control Matrices
• Change Risk Standards
• Control Design
• Control Effectiveness
• Documentation Skills
• Change Management
• Risk Governance

Soft Skills

• Effective Communication
• Influencing Without Authority
• Collaboration
• Partnership with Stakeholders
• Problem Solving

Certifications & Qualifications

• CIA
• CPA
• CISA
• CRISC

Industry Keywords

• Risk Management
• Compliance
• Audit Readiness
• Control Narratives
• Change Management