The Fraud risks including, but not limited to, External fraud and Internal Fraud, data leakage prevention due to fraud, fraud through suppliers, frauds where customers are a victim are key avenues for losses, reputational impact and systemic operational risk for financial services. This role exists to coordinate the supervision and oversight of these Fraud Risks Management activities globally and establish uniform practices across the function by cascading the guidelines and framework developed at Group level.  

 Rogue Trading (RT) risks as a key fraud risk category and under the Designated Market Activities (DMA) risks is a critical risk area within the Internal Fraud risks. This role exists to contribute to the management of all fraud risks, with focus on Rogue Trading risks. 

 Scope: All of Group's business activities that are exposed to fraud risks with specific focus on activities that are exposed to Rogue Trading risks globally. 

Responsibilities:

Within Group RISK ORM, the PMO Central role supports the Fraud & Rogue Trading Risk framework under ORM CTFR (Cyber, Tech Risk, Fraud and Resilience). It contributes to the definition, implementation, and oversight of the Group's control environment, with a strong focus on governance, consistency, and cross-entity alignment.

 The position operates at the interface between central ORM teams, LoD2 stakeholders, and business lines. 

 The role requires:  

 *         Strong experience in Operational Risk / Internal Control / Audit within banking or financial services.  

 *         Solid understanding of risk frameworks (RCSA, LoD1 and LoD2 controls, KRIs, Incidents). 

 *         Interest or exposure to fraud / rogue trading topics is a strong advantage.  

 *         Proven ability to coordinate complex topics across multiple stakeholders.  

* Strong analytical, communication, and synthesis skills.

* Proactive mindset with a risk anticipation and problem-solving approach.

 The general responsibility of the role includes: 

 FRAUD PREVENTION & PROTECTION FRAMEWORK DESIGN & IMPLEMENTATION 

          Support Risk ORM CTFR on the Operational Risk Management Framework on fraud related topics (HI, EWIB, Controls, RCSA, etc.), including the redaction of Group standards, procedures and policies, as well as the definition of a generic control plan within this domain of expertise. 

          Verify the proper implementation of the Operational Risk Management Framework on Rogue Trading risks liaising with RISK ORM correspondents at the relevant level and assist them when needed. 

Within DMA (Designated Market Activities) context, monitor events of Rogue Trading, analyze controls performed by 2LoD, perform/coordinate with Poles read across analysis.

 WATCH, RISK ANTICIPATION & MITIGATION ACTIONS 

          Perform global watch on Rogue Trading topics, main regulatory evolutions and internal / external incidents.  

          Coordinate on an annual basis the update and/or assignation of the Rogue Trading E learnings. 

 FRAUD GOVERNANCE, ALERTS AND PERIODIC REPORTING 

          Coordinate preparation of Rogue Trading Committee materials (incl. data extraction from 360RiskOp).  

          Consolidate inputs across stakeholders and ensure consistency of deliverables.  

          Support periodic reporting on fraud risks impacting the Group and clients.  

          Contribute to continuous improvement of governance and reporting processes. 

 Skills and Experience Required: 

Successful candidate will have exposure to operating in risk management programs in global organizations, with robust knowledge of technology, risks, architecture and related tools. Prior fraud risk management, compliance or fraud prevention experience and exposure to the Financial Services industry is a must. Experience with Rogue Trading risk management and systems is preferred.

 Specific requirements: 
  * Suitable experience (12+ preferred) in any of the disciplines - Fraud risk management, fraud examinations, IT risk management or IT continuity. Assistant manager or Associate VP.
* Bachelor's degree in information technology, Information Security, Business or Risk Management (or equivalent professional qualification).
  * Ability to independently investigate complex cases including cyber security incidents, intellectual property theft, fraud and abuse, asset misuse, and violations of corporate policy.
  * Team player - focus on the success of the whole team. Working well both with others, as well as individually.
  * Excellent stakeholder management skills.
  * Experience in a 2LoD, Risk function, operations or an Internal Audit role.
  * Good listening and analytical skills - being able to come to a thoughtful and business focused conclusion quickly.
  * Ability to see the customer perspective, i.e. from a business point of view, the most secure solution is not always workable or realistic considering costs and benefits.
* Demonstrating a calm professional approach, with a good understanding of delivery within time constraints and the need to escalate/inform departmental management as appropriate.
  * Adapting personal approach to suit situations, individuals, groups and cultures. 
  * Taking accountability for their actions and be open and honest when things have gone wrong and celebrating successes when things have gone well.
  * Being rigorous and thorough - especially when logging and tracking issues through to conclusion.
  * Ability to manage their workload as to meet the realistic targets and priorities set in conjunction with management.
* Demonstrating a high-level of commitment and self-motivation, combined with enthusiasm and a genuine interest in the role of Risk Assessment in business.
  * Ability to express views clearly and fluently, both orally and in writing. Considers the audience, avoiding technical jargon wherever necessary and appropriate. 

 Competencies 
  * Good knowledge of Internal and external fraud risk management, cyber security, IT concepts.
  * Understanding of the banking industry's regulatory requirements on Fraud and ICT (e.g. Article 325 of the Treaty on the Functioning of the European Union, EBA Guidelines on ICT and security risk management etc.)
  * Ability to articulate risk management concepts in business language
  * Excellent written and verbal communication skills
  * Proficient with Microsoft Office Suite
  * Prior experience documenting tool requirements to support risk management
  * Ability to travel to vendor sites and perform assessments as necessary
  * Proven ability to manage issues through to resolution; skilled at making judgment calls.
  * Ability to successfully multitask and complete difficult assignments within deadlines which may have short lead times
  * Industry certifications (e.g. ACFE, CISA, CRISC) or willingness to obtain the same
  * Works iteratively, delivering quickly and frequently to produce high quality documents and outputs which require little to no rework.
  * Multilingual capability with English proficiency (+ French or Spanish) is preferred.

 Conduct: 
  * Be a role model, supporting and fostering a culture of good conduct.
  * Demonstrate proactivity, transparency and accountability for identifying and managing conduct risks.

 Consider the implications of your actions on colleagues, partners and clients before making decisions, and escalate issues to your manager when unsure.