Senior Operational & Financial Risk Analyst

About the Team/Role

As a Senior Operational & Financial Risk Analyst in WEX Bank’s Second Line of Defense (2LoD), you will provide independent risk oversight across the Bank’s Entity-Level Risks and Controls, with direct management of the Primary Risks (split 50/50 between direct Bank operations and Parent services delivered via a Master Services Agreement). You will drive the complete automation of the Bank's central risk metric library, monitor 1LoD operational and policy metrics to ensure timely escalation of control breaches to the Entity Risk Management Committee (eRMC), and execute ad hoc 2LoD testing for emerging risks.

How you'll make an impact

• Entity & Primary Risk Oversight: Execute independent 2LoD monitoring and testing across all Entity-Level Risks. Take direct ownership of 2LoD oversight for the Primary Risks, evaluating both internal Bank controls and shared services delivered by the Parent company under the MSA.

• End-to-End Credit Judgment & Policy Oversight: Conduct routine 2LoD post-decision sample reviews on originated credits over $150k to evaluate qualitative underwriting judgment and policy compliance, reporting trends and actionable insights to the eRMC and Chief Credit Officer to drive credit policy updates and 1LoD training. 

• Metric Library Automation & Maintenance: Build and maintain a centralized, complete, and accurate risk metric library. Implement data automation pipelines (leveraging GRC platforms, SQL, or reporting tools) to eliminate manual monthly updating and ingestion workflows.

• 1LoD Metric Monitoring & eRMC Escalations: Continuously monitor 1LoD operational and policy risk metrics. Evaluate metric trends and control breaches that contribute to entity-level risks, preparing escalation packages and data for the ERMC according to established risk thresholds and bank procedures.

• Ad Hoc Risk Assessments: Conduct rapid-response, ad hoc 2LoD risk evaluations and testing for emerging risks (e.g., sudden operational incidents, new technology implementations, market shifts) that fall outside the annual testing schedule.

• Parent MSA & Intercompany Oversight: Serve as the primary 2LoD testing contact for parent-provided technology and operational services, validating that parent-executed controls meet Bank risk appetite standards and SLA terms.

Experience you'll bring

• Experience: 5–8 years in banking enterprise risk, operational risk, or internal audit, with 3–4 years focused on 2LoD testing, control validation, and metric oversight.

• Technical & Automation Skills: Hands-on experience with GRC systems (e.g., Logicgate, Jira) and data automation tools (SQL, Tableau).

• Domain Expertise: Deep understanding of entity-level risk taxonomies, operational and technology control frameworks (COSO, SOC, NIST), and intercompany MSA/SLA oversight in a regulated bank setting.

• Certifications (Preferred): CERP, or CRMP.
• AI Tool -- Gemini, ChatGPT, or equivalent