OnPoint is the largest community owned credit union in Oregon - and we're growing! Our growth provides great opportunities for you to reach your personal and professional goals. We value enthusiasm, commitment to outstanding performance, and providing opportunities to truly make a difference. If you are looking to join a team of dedicated, collaborative, and passionate individuals, OnPoint is looking for our next Operational Risk Officer. We invite you to explore and grow your career with us!
JOB SUMMARY:
The Operational Risk Officer supports the execution and continued development of the Operational Risk Management Program. This role serves as a second-line risk partner to assigned business areas, providing independent oversight, credible challenge, and subject-matter expertise regarding operational risks, internal controls, risk incidents, and remediation activities. The Operational Risk Officer applies strong financial-services and operational knowledge to identify emerging risks, assess business processes and control environments, lead Risk and Control Self-Assessments, and translate risk information into actionable recommendations. The role partners with business leaders while maintaining appropriate second-line independence and does not own or operate the business processes or controls being assessed.
ESSENTIAL FUNCTIONS:
Serve as the primary Operational Risk contact for assigned business areas and develop a detailed understanding of their products, services, systems, processes, vendors, and operational risk exposure.
Provide independent risk guidance and credible challenge regarding process changes, new initiatives, control design, risk acceptance, and remediation decisions.
Identify and escalate material risks, control weaknesses, emerging concerns, and risks that may exceed established risk appetite.
Coordinate with Enterprise Risk, Compliance, Legal, Information Security, Vendor Management, Internal Audit, and other risk functions when matters cross risk disciplines.
Lead end-to-end Risk and Control Self-Assessments for assigned business processes, including planning, walkthrough facilitation, risk identification, risk applicability analysis, inherent risk assessment, control documentation, control evaluation, and residual risk assessment.
Evaluate whether identified controls are appropriately designed to mitigate applicable risks and whether supporting documentation is sufficient, current, and evidence-based.
Provide credible challenge to business-provided risk ratings, control descriptions, and assessment conclusions.
Identify control gaps, process weaknesses, risks outside appetite, and opportunities to improve process consistency, oversight, automation, or quality control.
Review and investigate operational risk incidents and near misses, including fact gathering, root-cause analysis, control-failure identification, impact assessment, and corrective-action development.
Determine whether incident findings indicate an isolated event, broader control weakness, systemic concern, or potential issue requiring escalation.
Identify and clearly document self-identified issues, control deficiencies, root causes, risk impacts, and required corrective actions.
Partner with issue owners to develop remediation plans that address underlying root causes; monitor milestones, challenge insufficient actions, and support validation of corrective actions.
Monitor operational risk indicators, incidents, losses, issues, control gaps, process changes, and other relevant information for assigned business areas.
Prepare concise risk profiles, reports, and presentations for business leadership, Operational Risk management, and governance committees.
Contribute to Operational Risk policies, procedures, standards, templates, training, and guidance, and promote consistent application of methodologies.
Identify opportunities to improve risk-management processes through standardization, automation, workflow tools, and improved data.
Provide…