Manager/Senior Manager, Operational Risk & Controls

About the role

KOHO is seeking a Manager or Senior Manager, Operational Risk & Controls to join a high-performing team dedicated to strengthening the integrity and effectiveness of the firm's risk management framework. In this position, you will own the end-to-end execution of the Second Line Controls Testing program and evolve the operational risk management practices that support KOHO's mission of empowering Canadians through transparent and fair financial services. You will partner closely with Technology, Compliance, and business stakeholders to embed risk-based thinking into day-to-day operations while championing the use of AI, automation, and innovative tools. The role requires ownership of risk assessment, testing governance, and remediation tracking to ensure controls remain robust and aligned with regulatory expectations. If you are passionate about building scalable risk processes in a fast-moving, regulated fintech environment, this role offers the opportunity to have significant impact.

Key facts

What you'll do

Lead the evolution of KOHO's operational risk management framework and practices in alignment with OSFI guidelines including E-21, B-10, and E-13, as well as broader banking industry standards.

Own the end-to-end development, implementation, and continuous improvement of the Second Line Controls Testing program, including defining methodology, governance, and reporting standards.

Identify emerging operational risks and trends, and develop strategies for their mitigation and integration into control frameworks.

Lead and manage the day-to-day operations of the Second Line Controls Testing program to ensure timely and high-quality execution of testing activities.

Develop the annual Controls Testing plan using risk-based scoping and prioritization to focus efforts on the most critical areas of the business.

Create and maintain test scripts, workpapers, and supporting documentation to ensure testing conclusions are clear, consistent, and reusable.

Prepare testing status reports and summaries tailored for Management review and Risk Committee reporting.

Track and monitor remediation activities in partnership with First Line business owners to drive timely closure of identified issues.

Establish and manage Business Process Outsourcing (BPO) for independent controls testing execution and implement a quality assurance process to validate completeness, accuracy, and quality of external outputs.

Perform and/or oversee the independent testing of First Line controls to evaluate design effectiveness, operating effectiveness, and coverage across key business processes and risk domains.

Support enterprise-wide Risk and Control Self-Assessments (RCSAs) by collaborating with First Line business units to identify, assess, and document operational risks and controls.

Contribute to the operational risk event and loss data collection process, supporting root cause analysis and the identification of trends.

Assist in the preparation of thematic reviews and lessons learned analyses to promote continuous improvement in the control environment and risk management practices.

Build and maintain strong working relationships with First Line partners, acting as a collaborative and constructive ally in risk management initiatives.

Leverage AI, machine learning, RPA, and data analytics to enhance the efficiency and effectiveness of controls testing and risk assessment activities.

Support the deployment of automated testing scripts, intelligent workflows, and advanced reporting tools in partnership with Technology teams.

Collaborate with Compliance, Risk Management, and Internal Audit to ensure integrated risk oversight and consistent coverage across the organization.

Stay current on industry trends, regulatory developments, and best practices in operational risk management and controls testing.

Requirements

You must have 7 or more years of experience in operational risk, controls testing, internal audit, or compliance within financial services.

You demonstrate a solid understanding of the connections across non-financial risk domains such as compliance, third-party risk, business continuity, and technology/cyber risk.

You possess strong analytical, critical thinking, communication, and interpersonal skills.

You have prior experience working in regulated fintech, neobank, or direct-to-consumer financial institutions.

You are able to operate effectively in a fast-paced, dynamic environment with shifting priorities and deadlines.

You are comfortable working autonomously and collaboratively in a remote-first, distributed team.

You exhibit a strong commitment to accuracy, ownership, and follow-through in all aspects of your work.

You are proficient in the use of productivity and collaboration tools to execute controls testing and reporting activities.

Nice to have

Experience with RegTech solutions and emerging technologies in the risk and controls testing space.

Familiarity with AI and automation platforms that can be applied to controls testing and risk monitoring.

Knowledge of financial services regulatory frameworks and industry standards relevant to operational risk.

Practical notes

KOHO offers a remote-first role with flexible hours and asynchronous collaboration designed around autonomy and trust.

This is a full-time position eligible for Canadian employment benefits.

Candidates must be available to work from Canada-based locations, with no current travel requirements specified.

The role is posted with an open timeline until filled, and applications will be reviewed on a rolling basis.