Title Senior Operational Risk Manager

Location Kronberg, Germany

Reports To Head of 2nd Line Risk Management

As a Senior Operational Risk Manager, you will play a key role in applying and shaping the Operational Risk Framework and ensure that all operational risks are transparently managed across the organisation. You will integrate and independently challenge ICT‑related operational risks to ensure they are consistently reflected in the overall Op Risk profile.

Your main responsibilities include:

1. Operational Risk Management: Full accountability for the Operational Risk framework lifecycle.
2. Independent 2nd Line Review & Challenge of all Op Risk categories, including ICT‑related operational risks.
3. Assess technology‑driven operational impacts (e.g., system outages, failed IT changes, process breakdowns, data‑availability issues, outsourcing‑related disruptions) and ensure full incorporation into RCSA, OpRisk reporting, and issue/remediation management.
4. Loss Event and Issue Management: Oversee operational loss events and issues, including ICT‑related incidents; ensure proper classification, escalation, root‑cause analysis and remediation.
5. Plan, execute and continuously improve the annual Risk Control Self-Assessment (RCSA) process in close collaboration with business units, including assessment of inherent risk, control effectiveness, and residual risk.
6. Scenario Analysis & Capital Requirements: Coordinate and conduct scenario analyses to determine capital requirements for Operational Risk.
7. Ensure robust calculation of regulatory capital under Pillar 1 (CRR) and economic capital under Pillar 2.
8. Prepare management reports, present in governance committees, and actively contribute to projects and working groups.
9. Data Quality & Review & Challenge: Perform data quality assurance and review & challenge on OpRisk and ICT‑related operational risk data.
10. Regulatory Compliance: Ensure compliance with MaRisk, CRR/KWG and Basel OpRisk principles; support audits and supervisory reviews.
11. Cooperate with the Information Security & BCM function on DORA‑related operational implications, without owning these frameworks.
12. Risk Culture & Training: Promote a strong risk-aware culture and support awareness and training initiatives across the organization.

About you:

You bring deep expertise in Operational Risk Management and are comfortable operating in a regulatory environment.

The ideal candidate should have:

1. Fluent German and English
2. Several years Financial Services experience within Operational Risk Management, ideally with exposure to technology‑driven operational risks.
3. A university degree in economics, finance, mathematics or a related field.
4. Profound knowledge of regulatory frameworks (MaRisk, CRR, KWG) and DORA/BAIT from an Op Risk integration perspective.
5. Hands-on experience with RCSA processes, scenario analysis and capital calculations (Pillar 1 & Pillar 2)
6. Strong analytical and conceptual skills, with the ability to translate technical incidents or assessments into operational‑risk impacts.