About this role
Section: Overview ARM Holding Company Limited is seeking an analytical professional to strengthen operational resilience, risk management, business continuity, fraud prevention, and IT control frameworks across the organisation.
Section: Responsibilities
- Maintain operational risk databases, monitor key risk indicators (KRIs), analyse incidents, and track corrective actions.
- Conduct risk and control self-assessments (RCSAs) and identify operational risks, control weaknesses, and recurring failures.
- Support business continuity planning, business impact analyses, disaster recovery testing, and remediation activities.
- Assess fraud risks and support the implementation of preventive and detective controls.
- Evaluate risks associated with new products, systems, vendors, partnerships, and business changes.
- Prepare risk reports and dashboards for management and governance committees.
- Review third-party arrangements, operational level agreements (OLAs), and compliance with agreed service standards.
- Assess user access, privileged accounts, segregation of duties, and application transaction controls.
- Review system changes, releases, automated processing, interfaces, reconciliations, and exception reports.
- Test IT general and application controls, document findings, and monitor remediation.
- Support system implementations, user acceptance testing, data integrity, backups, and recovery controls.
- Promote risk awareness and contribute to improvements in enterprise risk management policies and procedures.
Section: Requirements
- Strong knowledge of operational risk management, RCSAs, operational loss events, KRIs, and control assessments.
- Good understanding of business continuity management, business impact analysis, disaster recovery, and operational resilience.
- Knowledge of fraud risk management, internal controls, and governance frameworks within financial services.
- Understanding of IT general controls, application controls, user access management, change management, and segregation of duties.
- Familiarity with COBIT, ISO standards, COSO, and DORA.
- Strong analytical, problem-solving, reporting, and root cause analysis skills.
- Ability to review system logs, audit trails, exception reports, and control-testing evidence.
- Understanding of system development life cycles, release management, and user acceptance testing.
- Knowledge of capital markets and financial services operational, technology, regulatory, and third-party risks.
- Familiarity with GRC platforms, data visualisation tools, or SQL is an advantage.
- Strong communication, stakeholder management, attention to detail, and ability to work independently and collaboratively.