Senior Manager - Operational Risk Management

Job Title Senior Manager Operational Risk

Reports To (Title) Chief Risk Officer No. of Openings 1

Organisation Unit Operational Risk

Location Mumbai, India

1. Organisation Unit Purpose (why does the unit exist? What are the results the unit is expected to deliver?)

Emirates NBD Group Operational Risk Unit is entrusted with the responsibility of supporting the Board Of Directors and Senior Management in designing and implementing and a comprehensive operational risk management strategy and framework that is structured to identify, measure, monitor and control operational risk exposures.

2. Job Purpose (Why does the job exist? What is the unique contribution made by the job holder?)

The position holder is expected to:

- Play a key role in the implementation of an operational risk management framework in line with Basel II requirements within Emirates NBD India.

- Provide operational risk advice to senior and executive management of Emirates NBD India.

- Act as point of contact for the management in the business and support functions of Emirates NBD India on operational risk related matters.

- Supporting Head of Group Operational Risk / CRO India in adhering and maintaining compliance with operational risk regulatory requirements and in effectively managing operational risks in Emirates NBD

3. Job Content (Describe the key results delivered by the job holder, how they are measured and the tasks performed to achieve the results?)

Key Results Performance Measures Main Tasks

1. Support and advice to business and support functions on OpRisk matters - Efficient OpRisk management in business and support functions - Update business on key OpRisk issues

- Provide advice on risk management and mitigation

- Proactively engage with the respective OpRisk & Governance team to effectively manage operational risks in the respective unit

- Analyze key findings from risk assessments and risk event collection for discussion with respective department heads as and when required.

- Communicate operational risk processes improvements and train business representatives on them.

2. Operational risk identification and assessment for Emirates NBD India

- NPPA reviews

- ORCA reviews

- Root-Cause analysis on OpRisk issues

- Timely event reporting

- Key Risk Indicator reporting

- Key Control Adequacy Assessment

Working with Group Operational Risk to:

- Ensure consistent identification and assessment of operational risks.

- Ensure timely support for new or changed processes, products, and other initiatives.

- Ensure completeness of operational risk self reviews conducted by units and Risk Acceptance as per the approved matrix before ratification by Head of Group Operational Risk.

- Ensure correct and complete adherence to the operational risk role defined in various operational risk policies.

- Ensure thorough review of operational risk events and timely submission of related reports to EXCO & Risk Committee.

- Conduct workshops for identification and assessment of operational risks.

- Oversight on Operational Risk Profiles update by business and support functions.

- Coordinate review of Fraud reports in liaison with operational risk event analysis.

- Coordinate review of audit reports as part of the risk identification and assessment.

- Support business in identification of Key Risks to enable generation of KRIs. Regular oversight of movements in KRIs for analysis & corrective actions.

- Support business in key control adequacy assessments and analysis of effectiveness of controls.

3. OpRisk Monitoring of Emirates NBD India Branch

- Up to date related logs with constant documented follow ups

- Regular maintenance of related reporting

- Monitoring of Key Risk Indicators and Control Assessments

- Ensure follow up on residual risks, action plans, and sign off conditions.

- Monitor compliance with all operational risk policies (incl. Outsourcing Policy, Reputational Risk Policy, and IT Security policies where applicable).

- Escalate issues in a timely manner to Head of Group Operational Risk and Chief Risk Officer

4. Awareness and Training. - Enhanced general OpRisk awareness. - Increased level of interaction & referrals from business lines.

- Provide training on operational risk, methods for identification and assessment of operational risks, and the supporting systems to the business/support units

- Enhance the awareness for operational risk via regular interaction.

5. Fraud Investigation & Prevention - Efficient Fraud Investigation and Reporting - Enhanced Fraud Awareness - Implement and maintain of the banks policy on fraud risk management and ensure compliance

- Support Head of FP&I Emirates NBD in any fraud investigation

- Conduct training and awareness programs in Branch on Fraud Risk Management

6. Internal Vigilance - Efficiently handling functions related to Internal Vigilance officer role - Receipt and review of information about corruption, malpractice or misconduct on the part of employees;

- Implement Group policies and work under the guidance of Group Fraud Prevention & Investigation team and assist them in their reviews as may be required;

- Close liaison and co-operation with the police authorities/ SFIO during the course of an inquiry and investigation;

- Review all pending matters, such as investigation reports, disciplinary cases and other vigilance complaints/cases in the first week of every month and expedite action;

- Periodic meetings with the CEO for review of vigilance work;

- Periodic reporting on the vigilance activities to the India EXCO;

- Regulatory reporting of frauds.

7. Business Continuity - Ensure maintenance of adequate business continuity plans - Support India IT and Operations in the development and timely update of a business continuity plan.

- Support periodic testing of the plan and reporting.

4. Organisation Chart (Attach the units organisation chart showing the reporting relationships (above and below) the job holder)

5. Internal / External Relationships and Committee Memberships ( Internal relationships cover other units within the organization; External relationships relate customers, government bodies, suppliers etc; Committees include formal forums where membership is nominated)

Interface (Int/Ext) Reason Committee Reason

6. Problems & Decisions ( State problems solved and decisions made on a regular basis by the job holder and the desired outcomes of actions)

Problems and Decision Desired Outcome

- Assessments of inherent & residual Operational Risk Exposures in line with OpRisk policies & procedures OpRisk exposure management &/or acceptance by the related competent authority

- Assessment of existing mitigating controls Enabling business to reallocate resources in a more efficient manner.

- Prioritization of reviews & redistribution of assignments - Fast tacking critical & strategic projects

- Enabling better management of available staff to overcome unexpected work overloads.

- Providing on the job training to reporting staff to diversify & expand their expertise.

7. Job Dimensions (a) List of Annual Profit/revenue/cost/volumes/portfolio etc. directly controlled or influenced by the job holder (b) Total number of employees managed (directly and indirectly) by job holder (c) Any other key aspects relevant to the job e.g. markets covered, products managed

Job Dimension Value/Description Job Dimension Value/Description

Direct & indirect effect on business units staff & management - Training & support to Risk Champions in business & support functions

- Active participation in projects & raising awareness of operational risks.

- Providing dedicated OpRisk training to business & support units as warranted. Oversight on design, structure & implementation of all new or changed products, processes or services. Supporting business in the identification of related operational risks & assessment of residual exposures & mitigating controls.

Indirect support to other OpRisk staff Providing support to subsidiaries with independent OpRisk units (e.g. Emirates Islamic, Egypt) Reduction of potential operational losses throughout the group - Proactive identification of operational risks & control gaps & working with business to try to close those gaps before losses are actually realized.

- Recommendation of action plans to close control gaps identified via reported incidents.

- Oversight of KRIs & KCAA

8. Person Specifications (required to carry out the job, not what the current or recommended incumbent possesses)

Specifications Description of Knowledge / Skill etc. Desirable or Essential

A. Education

- General

- Professional - Relevant business (minimum bachelor) degree

- Professional OpRisk certification

- Record of OpRisk professional training &/or Conferences. - Essential

- Desirable

- Essential

B. Experiences

(Years & Type)

- Industry

- Regional

- Functional - Minimum 7 years experience in a full service, global bank

- Operational risk management expertise - Essential

- Essential

C. Knowledge & Skills

- Technical

- Managerial - Experience in facilitation of risk review workshops

- High execution skills

- Fluent in English

- Written and verbal communication skills

- Bank/Group policies

- Banking operations

- Effective managerial & leadership skills

- Audit & Compliance knowledge

- Retail / Corporate Banking, Trade Finance & Treasury experience