Enterprise Risk Manager - COO Office

• 26 June 2026 • 100% • Indeterminate duration • Geneva The Enterprise Risk Manager within the Chief Operating Officer «COO» division is responsible for implementing a comprehensive risk management and control framework within the 1LOD COO functions, which will be designed and developed in close collaboration with the Chief Risk Officer and the Head of Internal Controls. Acting as a first line of defense, this role ensures that the bank's infrastructure, governance, policies, processes, and services are resilient, well-controlled, and aligned with the internal risk appetite and Swiss regulatory expectations. The position works closely with the various departments of the 1LOD COO function (such as IT, information security, physical security, facilities, operations, customer service, procurement, etc.) by acting as a central interface within the first line of defense and in collaboration with the second line of defense. Identify, assess, and monitor risks associated with relevant processes held by the COO Maintain the control framework for the concerned functions and processes, in compliance with the bank's internal/external regulation and risk appetite Regularly review and improve the control framework, supervise its implementation, and monitor the effectiveness of controls by the concerned control owners Collaborate closely with key stakeholders within the COO function to define action plans aimed at mitigating residual risks and filling control gaps Proactively escalate material incidents and control weaknesses to the COO, Chief Risk Officer, and Head of Internal Controls Governance, Reporting, Audit & Stakeholder Management Serve as a trusted risk partner for the COO management and key stakeholders Act as a central interface within the first line of defense for the COO function and the second line of defense Primary point of contact for internal and external auditors for the COO function Coordinate reporting on COO risk management issues to the management committees Risk Assessment for Changes & Projects Under the direction of the Chief Risk Officer, coordinate the implementation of operational risk, access, and resilience mitigation measures resulting from new products, process changes, and system implementations Operational Resilience, Business Continuity & Disaster Recovery Together with the Chief Risk Officer and the Chief Security Officer, maintain and propose updates to Business Impact Analyses (BIA) to identify vulnerabilities, critical functions, and potential threats Under the direction and in collaboration with the Chief Risk Officer and the Chief Security Officer, identify, document, and test critical functions, review business continuity plans (BCP) and disaster recovery plans (DRP) Coordinate crisis exercise planning in collaboration with the Chief Security Officer Support the bank's operational resilience framework, aiming to ensure the continuity of critical services in severe but plausible scenarios in collaboration with the Chief Risk Officer and the Chief Security Officer Monitor dependencies on people, processes, technologies, locations, and third-party suppliers and document them adequately in ERM tools (e.g., OPCIS) Access Management & Recertification Controls Manage access recertification for applications owned or managed by the COO, including services related to Lombard Odier (LO) Support and guide managers in performing access recertification based on Entra for all COO support departments and functions, acting as a point of contact and facilitator; excluding Front Office roles (managed by the BRM Front team). Excluding technical aspects of the Entra IAM platform and recertification tools which remain under the responsibility of the Security function Risk Controls for Outsourcing & Third Parties Assess and monitor risks related to outsourced services and critical suppliers, in coordination with the Chief Risk Officer, the Procurement function, and IT 5 to 7 years of experience in the banking sector, preferably in risk & control, audit, or BRM role Good understanding of regulatory requirements applicable to the banking sector, banking processes, and operational, IT, and resilience risks Solid knowledge of FINMA regulatory expectations and banking auditor requirements (organizational requirements of the 1st and 2nd lines of defense, particularly in compliance, data protection, operational risk, resilience, BCM/DR, and outsourcing) Good understanding of information security frameworks (ITIL) and third-party assurance reports (ISEA/SOC) Behavioral skills: Very organized, rigorous, and able to manage multiple priorities Aptitude for transversal projects and improvement of intra-team and stakeholder collaboration Excellent communication skills, French & English, both orally and in writing Innovative spirit, able to identify opportunities for process improvement and operational efficiency Solution-oriented, comfortable working under time pressure Credible and confident when interacting with stakeholders of all levels Language requirements: Excellent oral and written command of French and English, German is an asset Education & Certifications: Bachelor's degree in commerce, computer science, or equivalent Professional certification in information security