Operational Risk Officer

OnPoint is the largest community owned credit union in Oregon - and we're growing! Our growth provides great opportunities for you to reach your personal and professional goals. We value enthusiasm, commitment to outstanding performance, and providing opportunities to truly make a difference. If you are looking to join a team of dedicated, collaborative, and passionate individuals, OnPoint is looking for our next Operational Risk Officer. We invite you to explore and grow your career with us!   JOB SUMMARY:   The Operational Risk Officer supports the execution and continued development of the Operational Risk Management Program. This role serves as a second-line risk partner to assigned business areas, providing independent oversight, credible challenge, and subject-matter expertise regarding operational risks, internal controls, risk incidents, and remediation activities. The Operational Risk Officer applies strong financial-services and operational knowledge to identify emerging risks, assess business processes and control environments, lead Risk and Control Self-Assessments, and translate risk information into actionable recommendations. The role partners with business leaders while maintaining appropriate second-line independence and does not own or operate the business processes or controls being assessed. ESSENTIAL FUNCTIONS: Serve as the primary Operational Risk contact for assigned business areas and develop a detailed understanding of their products, services, systems, processes, vendors, and operational risk exposure. Provide independent risk guidance and credible challenge regarding process changes, new initiatives, control design, risk acceptance, and remediation decisions. Identify and escalate material risks, control weaknesses, emerging concerns, and risks that may exceed established risk appetite. Coordinate with Enterprise Risk, Compliance, Legal, Information Security, Vendor Management, Internal Audit, and other risk functions when matters cross risk disciplines. Lead end-to-end Risk and Control Self-Assessments for assigned business processes, including planning, walkthrough facilitation, risk identification, risk applicability analysis, inherent risk assessment, control documentation, control evaluation, and residual risk assessment. Evaluate whether identified controls are appropriately designed to mitigate applicable risks and whether supporting documentation is sufficient, current, and evidence-based. Provide credible challenge to business-provided risk ratings, control descriptions, and assessment conclusions. Identify control gaps, process weaknesses, risks outside appetite, and opportunities to improve process consistency, oversight, automation, or quality control. Review and investigate operational risk incidents and near misses, including fact gathering, root-cause analysis, control-failure identification, impact assessment, and corrective-action development. Determine whether incident findings indicate an isolated event, broader control weakness, systemic concern, or potential issue requiring escalation. Identify and clearly document self-identified issues, control deficiencies, root causes, risk impacts, and required corrective actions. Partner with issue owners to develop remediation plans that address underlying root causes; monitor milestones, challenge insufficient actions, and support validation of corrective actions. Monitor operational risk indicators, incidents, losses, issues, control gaps, process changes, and other relevant information for assigned business areas. Prepare concise risk profiles, reports, and presentations for business leadership, Operational Risk management, and governance committees. Contribute to Operational Risk policies, procedures, standards, templates, training, and guidance, and promote consistent application of methodologies. Identify opportunities to improve risk-management processes through standardization, automation, workflow tools, and improved data. Provide guidance and knowledge-sharing to business partners on operational-risk concepts and practices. Additional projects, responsibilities, or other duties assigned. KNOWLEDGE, SKILLS & COMPETENCIES: Strong understanding of operational risk management, internal controls, RCSAs, incident management, root-cause analysis, issue management, and remediation oversight. Significant knowledge of financial-services operations and the ability to understand complex processes, systems, transaction flows, vendor relationships, and regulatory dependencies. Ability to distinguish first-line process and control ownership from second-line oversight, credible challenge, and monitoring responsibilities. Demonstrated ability to independently facilitate risk discussions, challenge assumptions, and influence stakeholders without direct authority. Strong analytical and critical-thinking skills, including the ability to connect individual incidents and control gaps to broader risk themes. Ability to assess whether controls are clearly defined, appropriately designed, sustainable, and capable of being evidenced or evaluated. Excellent written and verbal communication skills, including the ability to translate complex operational information into clear risk conclusions and executive-ready reporting. Strong project-management and organizational skills, with the ability to manage multiple complex assessments, incidents, issues, and stakeholder relationships. Sound judgment, professional skepticism, and the ability to escalate concerns constructively. Proficiency with Microsoft Office; experience with risk, workflow, reporting, or data-analysis tools is preferred. MIN QUALIFICATIONS: Bachelor's degree in Finance, Business, Risk Management, Accounting, Economics, or a related discipline, or equivalent relevant work experience in lieu of a degree. 5 years of experience in financial-services operations, operational risk, internal audit, compliance, quality assurance, enterprise risk, or a related field. Demonstrated experience assessing processes, identifying risks and control weaknesses, and working across business functions to address complex operational matters. PREFERRED QUALIFICATIONS: 7 years of financial-services, operational-risk, audit, compliance, quality-control, or related experience. Experience supporting or leading RCSAs, risk assessments, operational-risk investigations, root-cause analysis, or issue remediation. Experience preparing risk reporting for senior management or governance committees and supporting internal audit or regulatory examination activities. Professional certification such as Certified Enterprise Risk Professional (CERP), Credit Union Enterprise Risk Certification (CUERC), Certification in Risk Management Assurance (CRMA), Certified Internal Auditor (CIA), Certified Credit Union Compliance Officer (CUCO), or comparable credential.   OnPoint employees are rewarded, acknowledged and appreciated! We take care of our Members, and OnPoint takes care of us by offering employees a generous vacation package, incentives, competitive hourly pay, 100% - paid employee medical, dental and vision premiums, Tri-Met / parking passes, 401k matching, tuition reimbursement and more! At OnPoint, we believe a workplace that reflects the richness of the world fosters a welcoming and empowering environment for everyone. We're committed to equity and inclusion, and consider all qualified applicants embracing every race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and your unique background. We encourage you to apply if you're passionate about this opportunity and have the core qualifications. Your unique experiences and skills are what make you a strong candidate. Don't let imposter syndrome hold you back! Our recruitment process is designed to be inclusive and accessible to all. If you need any accommodation(s) during the application or interview stage, please let us know. We're dedicated to providing what's necessary to ensure a fair and inclusive experience.