Operational Resilience and System Control Analyst

ARM Holdings is hiring an Operational Resilience and System Control Analyst in Ikoyi, Lagos to strengthen how the ARM Group identifies, assesses, and manages operational risks, business continuity, and system controls across the Group

Job Details

• Location: Ikoyi, Lagos
• Job Type: Full-time
• Work Mode: On-site
• Focus: Operational risk, business continuity, IT general and application controls

About the Role

The role strengthens the ARM Group's operational resilience and risk management framework by identifying, assessing, monitoring and mitigating operational risks across business processes, systems and third-party arrangements. It supports business continuity and disaster recovery planning, risk and control assessments, fraud prevention, and the monitoring of key risk indicators and management actions. The role also reviews IT general and application controls, including user access, system changes, transaction processing and data integrity, while ensuring compliance with established policies and control standards. It prepares risk reports for management and governance committees, coordinates remediation of control gaps, and drives continuous improvement in operational risk management and resilience

Key Responsibilities

• Maintain the ARM Group's operational resilience database, including collection, validation, classification, analysis and reporting of operational incidents, near misses and financial and non-financial losses; monitor KRIs and track agreed management actions through to closure
• Analyse operational risk across business processes covering loss trends, root causes and recurring control failures, and recommend preventive and corrective actions
• Support development, implementation and periodic review of the Group's BCM framework, business continuity plans, BC/DR tests, and business impact analyses (BIAs)
• Work with Technology and Information Security to coordinate periodic BC/DR tests for critical applications and processes, document lessons learned and track remediation of gaps
• Coordinate and periodically review risk and control self-assessments (RCSAs) across business units so key operational risks and process and system controls are identified, assessed and documented
• Work with Technology and Information Security to assess operational resilience dependencies and ensure recovery and control arrangements exist for critical systems and processes
• Work with Internal Audit and relevant business functions to support fraud prevention and detection controls, including fraud risk assessments, monitoring of red flags and investigation support where required
• Support new projects and initiatives with operational risk assessments for new products, processes, systems, vendors, partnerships and significant business changes, and help implement effective controls
• Prepare and present periodic operational risk and resilience reports and dashboards for management risk committees, Board committees and other governance forums
• Promote operational resilience awareness through training, engagement and supervision of risk champions, and other risk culture initiatives
• Support reviews of third-party and outsourcing arrangements from an operational resilience and business continuity perspective
• Contribute to continuous enhancement of the ARM Group's enterprise risk management (ERM) framework, policies, procedures, tools and reporting processes
• Develop, document and periodically review operational level agreements (OLAs) between internal teams, and monitor compliance with agreed OLAs through to closure of gaps
• Review user access to business applications and privileged accounts, including access requests, role changes, periodic recertification and timely removal of access for leavers; verify approvals, least-privilege access and segregation of duties
• Assess application controls over transaction initiation, authorisation, processing and posting, including maker-checker controls, approval limits, duplicate checks and exception handling
• Review system changes, configuration changes, releases and data amendments for documented approvals, testing, UAT, separation of development and production access, and controlled deployment and rollback arrangements
• Review controls over interfaces, automated processing and reconciliations; monitor failed jobs, rejected transactions and reconciliation exceptions through to resolution
• Review audit trails and exception reports for unauthorised access, unusual transactions, privileged activity and changes to sensitive data or system parameters; escalate control breaches and support investigation and remediation
• Assess design and operating effectiveness of IT general controls and application controls through risk-based testing and evidence review; maintain findings, agreed actions and closure evidence
• Participate in system implementations and digital initiatives to assess control requirements during design and UAT, and verify significant control gaps are resolved or formally risk-accepted before deployment
• Work with Technology, Information Security, Operations and Internal Control to review controls over data accuracy, completeness, retention and recovery, including evidence of backup and restoration tests for critical applications

Requirements

• Strong understanding of operational risk management principles, frameworks and methodologies, including RCSAs, operational loss event management, KRIs and control assessment
• Good knowledge of business continuity management (BCM), business impact analysis (BIA), disaster recovery (DR) and operational resilience principles
• Practical understanding of fraud risk management, including fraud risk assessments, fraud indicators, preventive and detective controls, incident escalation and investigation support
• Strong risk identification, assessment and analytical skills, with the ability to evaluate processes, identify control weaknesses and recommend practical risk mitigation measures
• Ability to perform root cause analysis on operational incidents, losses, control failures and near misses and translate findings into actionable remediation plans
• Good understanding of internal controls, process risk and governance frameworks within financial services
• Strong data analysis and reporting skills, including analysing risk and incident data, identifying trends and preparing risk dashboards and management reports
• Familiarity with GRC platforms, data visualisation tools or data analytics tools is an advantage
• Strong stakeholder management and interpersonal skills, with confidence to engage and appropriately challenge business units on risk and control matters
• Good attention to detail, sound judgement and the ability to manage multiple risk activities and deadlines simultaneously
• Strong problem-solving and critical-thinking skills, with a proactive approach to identifying emerging operational risks and control gaps
• Ability to work independently while collaborating effectively with Operations, Technology, Information Security, Compliance, Internal Control, Internal Audit and other business functions
• Good understanding of the capital markets and broader financial services operating environment, including operational, technology, regulatory and third-party risks
• Good understanding of relevant international frameworks, standards and regulatory requirements, including COBIT, ISO standards, COSO and DORA
• Demonstrated ability to promote risk awareness and a strong risk culture across the organisation
• Good understanding of IT general controls and application controls, including user access management, privileged access, segregation of duties, change management and system operations
• Ability to assess automated transaction controls, maker-checker workflows, approval limits, system interfaces, reconciliations and controls over master data and transaction amendments
• Ability to review system logs, audit trails and exception reports, perform control testing and document evidence, findings and remediation actions clearly
• Practical understanding of the system development life cycle, user acceptance testing, release management and control requirements for digital platforms; experience using SQL or similar tools for control analysis is an advantage

How to Apply

Follow the link below