Risk Manager

Full Job Description

Enterprise Risk Framework Execution: Support the MIPSL CRO in implementing and maintaining the MIPSL enterprise risk management (ERM) framework, aligned with CBI expectations and proportional to a regulated payments institution. Risk Identification & Assessment: Lead MIPSL risk assessments across key domains (operational, compliance, financial, strategic), ensuring risks are clearly articulated, measured, and documented using a consistent methodology. Risk Register & Governance: Maintain the MIPSL enterprise risk register, ensuring risks, controls, and mitigation actions are current, and support structured risk governance through committees and reporting forums. Second Line Oversight & Challenge: Provide independent oversight and constructive challenge to MIPSL first-line functions (Operations, Technology, FinCrime), ensuring controls are appropriately designed and operating effectively. Control Framework & RCSA: Facilitate MIPSL's Risk and Control Self-Assessments (RCSAs), control testing, and validation activities, identifying control gaps and tracking remediation to closure. Key Risk Indicators (KRIs): Develop and monitor MIPSL's KRIs and risk appetite metrics, ensuring breaches or emerging risks are identified early and escalated appropriately. Incident & Issue Oversight: Oversee MIPSL risk events, incidents, and near misses, ensuring root cause analysis is performed and lessons learned are embedded into the control environment. Third-Party & Outsourcing Risk Coordination: Work closely with MIPSL Operations and Technology oversight roles to ensure third-party risks are captured within the MIPSL enterprise risk view and aligned to outsourcing requirements. Stress Testing & Scenario Analysis: Support MIPSL risk scenario analysis and stress testing activities, particularly relating to operational disruption, financial crime exposure, or third-party failure. Regulatory Engagement Support: Prepare MIPSL risk materials for CBI engagement, including inspections, risk assessments, and ongoing supervisory dialogue. Risk Appetite & Policy Support: Support the development and periodic review of the MIPSL risk appetite statement and risk policies, ensuring alignment with the entity's strategy and regulatory obligations. Bachelor's Degree in Risk Management, Engineering, Government Intelligence, Security, Information Technology, or a related field Relevant experience in risk management, privacy, security, compliance, government intelligence, operations, auditing, and/or finance; OR equivalent experience. Master's Degree in Risk Management, Engineering, Government Intelligence, Security, Information Technology, or a related field, with solid experience in risk management across operations, engineering, information technology, business analysis, consulting, auditing, privacy, security, compliance, government intelligence, and/or finance; OR Bachelor's Degree in a related field, including Cybersecurity, with significant relevant experience; OR equivalent experience. Membership with a relevant risk domain association such as IAPP, ISC2, ISACA, CIA, SCCE, DRI, CBCB, COSO, or IIA. Experience supporting audits, regulatory reviews, inspections, or risk governance in a regulated environment. Experience with AI, AI-based analytical tools, AI governance, or AI governance frameworks.