Apply on Employer Site

Bank of Hawaii · 8 hours ago

Enterprise Risk Testing Senior Officer

Honolulu, HI

Full-time

Onsite

Senior Level, Lead/Staff

12+ years exp

Bank of Hawaii is seeking an Enterprise Risk Testing Senior Officer who will plan and perform independent testing of the Bank’s system of internal controls. The role involves supporting the Bank’s risk culture, executing the Enterprise Risk Testing Program, and driving continuous improvement in the Bank’s control framework.

BankingFinanceFinancial ServicesWealth Management

Responsibilities

Supports the Bank’s Risk Culture:Supports and promotes a robust enterprise risk management culture, through demonstration of knowledge and experience, skillful and effective communication, and development of strong internal relationships

Knowledge and Expertise: Has and maintains a superior understanding of all consumer compliance laws and regulations that affect the Bank's operations and keep abreast of any regulatory changes. Also has and maintains strong knowledge of the Bank's products and services, and policies, procedures, and processes

Enterprise Risk Testing (ERT) Program: Assists in executing the Bank's Enterprise Risk Testing Program. Assists in developing guidance documents and templates to standardize the testing approach and sampling methodology, a universal test steps library, workpaper documentation, model language for monitoring results, and reports. Assists in estimating the resource requirements for various engagements, tracking resource availability, scheduling engagements and allocating resources, and tracking engagement status

Assists in Developing the Annual Testing Plan: Assists in developing a comprehensive Annual Testing Plan to prioritize and track testing activities. Ensures that the Annual Testing Plan is commensurate with risk and continuously updated to keep pace with regulatory changes and climate; risk metric breaches and risk events; management concerns; and changes in the Bank’s products, services, market share and volumes, distribution channels, processes, people, systems, and vendors

Plans ERT Reviews: Applies a risk-focused approach in determining the scope, coverage, and frequency of ERT activities. This includes reviewing Risk and Control Self-Assessments (RCSAs), New (or Modified) Product, Service, or Initiatives (NPSIs), process flows, and other risk and control assessments; conducting entrance meetings and walkthroughs with business units; identifying relevant systems, data, reports, and procedures; evaluating prior errors, issues, gaps, and deficiencies; and documenting the rationale for any key controls that are scoped out of testing

Leads ERT Reviews: Leads and participates in ERT reviews. Evaluates the design of the Bank’s compliance and operational risk controls to identify any weaknesses or opportunities for enhancement or effectiveness. Conducts complex testing of the controls to validate their effectiveness, and to confirm that the Bank has designed and implemented sound operational practices to manage its risks. Applies judgement to select the appropriate testing technique(s), sampling methodology, and sample size. Evaluates test results against established tolerance levels and thresholds to determine the effectiveness of the internal controls

Drives Continuous Improvement: Proposes revisions to update and strengthen controls and control descriptions, makes recommendations to enhance business unit processes, and drives continuous improvement in the Bank’s control framework. Identifies and documents issues, and proposes or evaluates corrective action plans

Prepares and Approves Reports and Workpapers: For each reviewed area, prepares and approves reports that clearly identify the scope, findings, any necessary corrective action to be taken by management, and an overall rating or opinion. Ensures that the test results are clearly documented and supported, and that workpapers are written and organized such that a third party can use the documentation to complete the same test and reach the same conclusions

Plans and organizes work, manages multiple tasks, sets objectives/goals, and re-prioritizes as needed

Performs all other miscellaneous responsibilities and duties as assigned

Qualification

Risk managementRegulatory complianceAudit experienceProcess improvementMicrosoft applicationsProject managementAnalytical skillsInterpersonal skillsPresentation skillsCommunication skills

Required

Bachelor's degree from an accredited educational institution or equivalent work experience

Minimum 12 years of work experience in banking, audit, regulatory compliance and/or risk management

Process improvement and/or project management experience in lead roles required

Experience with or knowledge of monitoring, testing, and risk assessment

Demonstrated proficiency and expertise with personal computers in a networked environment and Microsoft applications (Outlook, Word, Excel, Access and PowerPoint) or similar software

Knowledge of or ability to use Bank systems and software

Knowledge of current accounting principles and practices, including internal control concepts

Excellent interpersonal, presentation, written and oral communication skills

Able to engage with all levels of the organization

Strong attention to detail and analytical skills

Self-starter, able to prioritize work to achieve the required objective in a timely manner

Able to identify and define problems; conduct research and analyze information and various situations relating to data management issues

Must be able to recommend and discuss solutions / alternatives to complex compliance issues clearly and concisely with any level of staff

Able to work flexible hours including holidays, weekends and evenings as necessary