Be our next OPC officer in Oslo

In the role as an OPC Officer, you will be responsible for organizing the operational risk management and the permanent control framework on a risk-based approach. The purpose of the OPC function globally is – among others - to ensure the further development of a high-level culture of risk by employees, but also the effectiveness and efficiency of Arval’s internal operation. Overall, you will work across all of the Norwegian organization and create fruitful relationship with your colleagues within the business.

What you will do 

Management of the Risk and Control Self-Assessment related Processes 

Identification and assessment of risks and controls (Risk and Control Self-Assessment) 

• Ensure that key operational units and processes, critical IT assets, material risks and risk mitigates are identified inventoried and maintained at the appropriate level 

• Maintain the risk taxonomy, cartography and risk assessment at the appropriate level 

• Ensure the effective implementation and maintenance of the RCSA framework within the 1st LoD control perimeter at the appropriate level 

• Perform/drive the risk identification and assessment in liaison with independent control functions when needed, ensuring validation by the relevant management level and consistency with the defined risk tolerance 

• Contribute to the definition and follow-up of remediation plan if needed 

Procedures 

• Ensure that Group procedure requirements are implemented locally, complemented with local specificities (regulations, tools organizations, ...) 

• Ensure that the procedures designed by the businesses and functions are identified, updated, properly stored and communicated to the relevant stakeholders within Arval Norway

• Identify and propose calibration of Arval Norway's procedures according to the outcome of the risk assessment and other risk events (historical incidents (HI), control results, external events, Audit missions, ) 

Controls and actions plan 

• Define and regularly update the Arval Norway's control plan according to the outcome of the risk assessment, regulations, other risk events (HI, control results, external events, Audit missions, ...) 

• Perform and/or coordinate controls according to this control plan 

• Ensure that control results are reviewed and analyzed by the Comex members and when relevant by operational teams / relevant stakeholders and that remediation action plans are defined if and when needed 

• Input in Group tools the control results and major action plans 

• Follow-up the implementation of remediation actions 

Findings, recommendations and permanent control actions 

• • Upon notification/receipt of reports, organize the follow-up of the findings and recommendations, either issued internally (e.g. IG supervision) or externally (external auditors, supervisors) and ensure that they are closed within due date 

Dynamic management of the Operational Risk Management 

Management of historical incidents (including near-misses) 

• Alert the management and the independent control functions if needed on key incidents 

• Collect incidents (including impacts measurement), report and update in the Group database 

• (as well as local databases if needed), including suspected and attempted fraud cases 

• Analyze incidents in a timely manner and define, jointly with the relevant stakeholders, the correctives measures be implemented to mitigate risks 

• Follow-up and / or initiate the implementation of remediation actions and the unfolding of long term incidents 

• Perform controls on the incident collection process, in particular the cross-check with other databases (accounting or other when existing) and the half-yearly attestation by the local management 

Management of external events 

• Watch over, in collaboration with Independent Control Functions, external events so that any major external event is taken into account in operational risk framework

Supervision of the implementation of the prevention and detection Anti-fraud Framework 

• Promote the Implementation and operation of ad hoc means and tools (tools, procedures, guidelines) with the support of the CCCO Office; 

• Setup and implement a fraud risk awareness training program for newcomers and specific trainings for employees most exposed to fraud risk; 

• Gathering of all information relevant to fraud risk and its dispatching to the RISK Function and the 3LoD; 

• Follow up, on a regular basis, of the management of fraud risk, that should be on the agenda of internal Monitoring Committees or their equivalents (ICC is an option); 

• Management of the implementation of recommendations from the 3LoD. 

Support Local Conduct framework 

Coordination of the local Conduct Framework with Corporate and local stakeholders 

• Co-animate the conduct framework 

• Organize Local Conduct Committees, report KPI's and monitor the implementation of the Conduct action plans. 

Management support and governance 

Involvement in Committees 

• Coordinate, support and advise in the validation process for exceptional transactions, new products/activities/processes (including outsourcing initiatives) validation committees (e.g. TAC/NAC) and follow-up of the implementation (e.g. that the conditions issued by control functions are met) 

• Coordinate, or ensure existence of participation to the committees that ensure continuous adherence of Arval Norway to the regulations and notably in charge of reviewing regulatory related control results and performance indicators, ensuring escalation of potential breaches, following-up of required remediation actions, analysing any impact of change of regulation on OPC set-up, i

Alert and Reporting 

• Alert and escalate to the relevant level of management as well as to the relevant independent control functions any operational risk incident and/or any recurring weakness 

• Perform periodic and ad-hoc reporting to the appropriate level of management as well as to independent control functions 

Relevant experience and requirements

• Risk assessment and management

• Internal control development and monitoring

• Analytical and problem-solving abilities

• Reporting and presentation skills

• Attention to detail and accuracy

• Compliance knowledge (regulatory, industry and Group standards)

• Communication, interpersonal skills

• Audit coordination and management 

• Team work and collaboration

• Bachelor degree minimum in finance, accounting, risk management or a related field 

• Minimum 2 years of experience in auditing or risk management (preferably in a similar sector)

• Excellent language skills (Norwegian / English)

• Strong analytical skills