The Operational Risk Review (ORR) Technology Analyst has an exciting opportunity to be a part of the build and implementation of Independent Risk Review and Assessment’s operational risk testing program.Operational Risk Management oversees the Company’s Operational Risk Framework, including: taxonomies, internal and external loss data, control programs, risk and control self-assessment (RCSA), scenario analysis, root cause analysis, issue management, policy, risk appetite and aggregation,reporting, product change management, corporate security and investigations, third party risk management, sales and services risk oversight, governance, capital oversight, and stress testing across the Company.The Operational Risk Review (ORR) Technology Analyst (“Analyst”) is responsible for the execution of testing activities within Independent Risk Review Assessment (IRRA), a centralized second line independent testing function. Key roles and responsibilities include working with the business lines and other Technology, Risk, Compliance, and Audit professionals across the bank to evaluate processes and controls to ensure effective risk management framework. The Analyst is responsible for test execution within projects and activities that confirm compliance with internal policies applicable laws and regulations related to technology, data governance, cyber, system and information security. The role is responsible for the identification of control and process weaknesses through design assessments and testing activities. If gaps are identified, the ORR Technology Analysts will work with the ORR Technology Manager to partner with the business line and Risk Management groups to recommend and influence solutions that mitigate operational risks. Further, the Analyst is responsible for effective verbal communication of testing resultsto the ORR Technology Lead Analyst and/or Technology Manager and for responding to and/or escalating significant risks as appropriate.Basic Qualifications- Bachelor's degree, or equivalent work experience- Typically more than five years of applicable experiencePreferred Skills/Experience- Basic or intermediate knowledge of technology, systems, data governance, cyber and / or informationsecurity risks as well as industry trends that impact Bank operations.- Basic or intermediate Risk, Compliance, and Audit competencies.- Solid understanding of the business line’s operations, products, services, systems, and associated risks.- Solid business acumen and credibility to help business line(s) proactively identify and address risks.- Average process facilitation, project management, and analytical skills.- Average presentation, interpersonal, written, and verbal communication skills.- Proficient computer navigation skills using a variety of software packages, including Microsoft Office applications and word processing, spreadsheets, databases, and presentations.- Applicable professional certifications (e.g., CISA, GSNA, CISSP, CRISC, CIA) are preferred

The role offers a hybrid/flexible schedule, which means there's an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days.