Manager/Senior Manager, Operational Risk & Controls

About KOHO

We’re on a mission to make financial services better for every Canadian. That means no hidden fees, no predatory interest rates - just financial products designed to help our users spend smart, save more, and build real wealth. We’re a performance organization with a strong heart: we care deeply about outcomes, and everything ties back to our mission - to financially empower a generation of Canadians.

At KOHO, we’re not your average 9-5. We believe real impact comes from people who are trusted, empowered, and supported to do their best work - without sacrificing their lives to do it. We prioritize work-life integration, not just work-life balance. That means asynchronous collaboration, flexible hours, and a remote-first setup built around autonomy and high trust.

KOHO is entering its next chapter - leaner, smarter, more AI-integrated. We’re building for impact, not bureaucracy. If you thrive in environments that value clarity, ownership, and bold thinking, you’ll fit right in.

About The Role

We’re looking for a highly motivated Manager/Senior Manager, Operational Risk Management to join our Operational Risk Management (ORM) team. Reporting to the Director, ORM, this role will execute and enhance our risk assessment processes and drive the tactical delivery of the Second Line Controls Testing program. The ideal candidate will bring strong experience in controls testing and operational risk management, with a passion for leveraging AI, automation, and innovative technologies.

What You’ll Be Doing

Operational Risk Leadership

Evolve KOHO’s operational risk management framework and practices aligned with applicable OSFI Guidelines (E-21, B-10, E-13) and banking industry standards.

Lead end-to-end development and implementation of a Second Line Controls Testing program , including methodology, governance, and reporting standards.

Identify emerging operational risks and trends and develop implementation strategies.

Controls Testing Program & Execution

Lead and own the day-to-day operations of the Second Line Controls Testing program, ensuring timely completion of testing activities in accordance with established methodology and standards.

Lead the development of the annual Controls Testing plan, including risk-based scoping and prioritization of testing activities.

Develop and maintain test scripts, workpapers, and documentation to support testing conclusions and findings and improve program quality and consistency.

Prepare testing status reports and summaries for Management review and Risk Committee reporting

Track and monitor remediation activities, partnering with First Line business owners to ensure timely closure of identified issues.

Establish and implement Business Process Outsourcing (BPO) for independent controls testing execution; Develop and maintain a quality assurance (QA) process to ensure completeness, accuracy, and quality of BPO agent outputs.

Perform and/or oversee the independent testing of First Line controls to assess design effectiveness, operating effectiveness, and control suite coverage across key business processes and risk areas.

Risk Assessment & Monitoring

Support the execution of enterprise-wide Risk and Control Self-Assessments (RCSAs), partnering with 1st Line business units to identify, assess, and document operational risks and controls.

Support the operational risk event and loss data collection process, assisting in root cause analysis and trend identification.

Assist in the preparation of thematic reviews and lessons learned analyses to drive continuous improvement in the control environment.

Stakeholder Engagement & Collaboration

Build and maintain strong working relationships with First Line business partners, serving as a collaborative and constructive partner in risk management activities

Partner with colleagues in Compliance, Risk Management, and Internal Audit to ensure integrated risk oversight and coverage.

AI, Automation & Innovation

Identify opportunities to leverage AI, machine learning, RPA, and data analytics to enhance controls testing and risk assessment efficiency.

Support deployment of automated testing scripts, intelligent workflows, and advanced reporting tools.

Collaborate with Technology teams to evaluate and implement emerging RegTech solutions.

Stay current on industry trends, regulatory developments, and best practices in operational risk management and controls testing.

Who You Are

You have 7+ years in operational risk, controls testing, internal audit, or compliance within financial services.

You have a solid understanding of the connectivities across non-financial risk domains (compliance, third party, business continuity, tech/cyber, etc.)

You have strong analytical, critical thinking, communication, and interpersonal skills.

You’ve worked in regulated fintech, neobank, or direct-to-consumer financial institutions.

You’re passionate about innovation, inclusion, and empowering financial wellness.

The budgeted salary range for this role is $110,000-$170,000 CAD / year.

At KOHO, we are dedicated to providing pay transparency to all candidates. Compensation at KOHO is determined through various factors including but not limited to: comparable salary market data within Canada, technical skill assessment, a holistic view of previous work history, and internal pay equity with other KOHO team members.

• Description de poste en français
• Nous sommes à la recherche d’un ou d’une gestionnaire / gestionnaire principal(e) motivé(e), Gestion des risques opérationnels pour joindre notre équipe de gestion des risques opérationnels (GRO). Relevant du directeur ou de la directrice, GRO, la personne titulaire de ce poste exécutera et optimisera nos processus d’évaluation des risques et pilotera la mise en œuvre tactique du programme d'évaluation des contrôles de deuxième ligne. Le candidat ou la candidate idéal(e) possédera une solide expérience en évaluation des contrôles et en gestion des risques opérationnels, ainsi qu'une passion pour l'utilisation de l'IA, de l'automatisation et des technologies innovantes.

Vos responsabilités

Leadership en gestion des risques opérationnels

Faire évoluer le cadre et les pratiques de gestion des risques opérationnels de KOHO, conformément aux lignes directrices applicables du BSIF (E-21, B-10, E-13) et aux normes du secteur bancaire.

Diriger le développement et la mise en œuvre de bout en bout d'un programme d'évaluation des contrôles de deuxième ligne, y compris la méthodologie, la gouvernance et les normes de production de rapports.

Identifier les risques opérationnels émergents ainsi que les tendances, et élaborer des stratégies de mise en œuvre.

Exécution et programme d'évaluation des contrôles

Diriger et prendre en charge les opérations quotidiennes du programme d'évaluation des contrôles de deuxième ligne, en veillant à ce que les activités d'évaluation soient réalisées en temps opportun, conformément à la méthodologie et aux normes établies.

Diriger l'élaboration du plan annuel d'évaluation des contrôles, y compris la définition de la portée axée sur les risques et la hiérarchisation des activités d'évaluation.

Développer et maintenir les scénarios de test (scripts), les documents de travail et la documentation afin de soutenir les conclusions et les constats d'évaluation, tout en améliorant la qualité et la cohérence du programme.

Préparer des rapports d'étape et des résumés d'évaluation pour examen par la direction et pour présentation au comité des risques.

Suivre et surveiller les activités de remédiation, en partenariat avec les responsables d'unités d'affaires de première ligne, afin de garantir la résolution rapide des problèmes identifiés.

Établir et mettre en œuvre l'externalisation des processus d'affaires (BPO) pour l'exécution indépendante de l'évaluation des contrôles ; développer et maintenir un processus d'assurance qualité (AQ)