Senior Operational & Financial Risk Analyst
At a glance
Senior Risk & Financial Compliance role at WEX. Midvale · full-time · $85,000–$106,500 base.
financeroles summary, based on the employer's posting.
What you'll do
- Independently test and monitor entity-level risks, covering Bank operations and Parent services provided through the MSA
- Sample credits above $150,000 after decisions, then give the eRMC and Chief Credit Officer findings for policy and training
- Build and maintain the central risk metric library, automating data flows that currently require monthly manual work
- Watch first-line operational and policy metrics, prepare breach escalations, and test emerging risks outside the annual schedule
- Check Parent technology and operational controls against the Bank’s risk appetite and service-level terms
What you bring
- At least five years in banking enterprise risk, operational risk or internal audit, with three to four years in second-line testing and oversight
- Practical experience with GRC systems and data automation tools such as SQL or Tableau
- Deep knowledge of entity-level risk taxonomies, operational and technology control frameworks, and intercompany MSA/SLA oversight in regulated banking
Who this fits
This senior analyst role suits someone with second-line testing experience who can work across controls, risk metrics and automation. The position is based in Midvale, United States.
From the employer
About the Team/Role
As a Senior Operational & Financial Risk Analyst in WEX Bank’s Second Line of Defense (2LoD), you will provide independent risk oversight across the Bank’s Entity-Level Risks and Controls, with direct management of the Primary Risks (split 50/50 between direct Bank operations and Parent services delivered via a Master Services Agreement). You will drive the complete automation of the Bank's central risk metric library, monitor 1LoD operational and policy metrics to ensure timely escalation of control breaches to the Entity Risk Management Committee (eRMC), and execute ad hoc 2LoD testing for emerging risks.
How you'll make an impact
- Entity & Primary Risk Oversight: Execute independent 2LoD monitoring and testing across all Entity-Level Risks. Take direct ownership of 2LoD oversight for the Primary Risks, evaluating both internal Bank controls and shared services delivered by the Parent company under the MSA.
- End-to-End Credit Judgment & Policy Oversight: Conduct routine 2LoD post-decision sample reviews on originated credits over $150k to evaluate qualitative underwriting judgment and policy compliance, reporting trends and actionable insights to the eRMC and Chief Credit Officer to drive credit policy updates and 1LoD training.
- Metric Library Automation & Maintenance: Build and maintain a centralized, complete, and accurate risk metric library. Implement data automation pipelines (leveraging GRC platforms, SQL, or reporting tools) to eliminate manual monthly updating and ingestion workflows.
- 1LoD Metric Monitoring & eRMC Escalations: Continuously monitor 1LoD operational and policy risk metrics. Evaluate metric trends and control breaches that contribute to entity-level risks, preparing escalation packages and data for the ERMC according to established risk thresholds and bank procedures.
- Ad Hoc Risk Assessments: Conduct rapid-response, ad hoc 2LoD risk evaluations and testing for emerging risks (e.g., sudden operational incidents, new technology implementations, market shifts) that fall outside the annual testing schedule.
- Parent MSA & Intercompany Oversight: Serve as the primary 2LoD testing contact for parent-provided technology and operational services, validating that parent-executed controls meet Bank risk appetite standards and SLA terms.
Experience you'll bring
- Experience: 5–8 years in banking enterprise risk, operational risk, or internal audit, with 3–4 years focused on 2LoD testing, control validation, and metric oversight.
- Technical & Automation Skills: Hands-on experience with GRC systems (e.g., Logicgate, Jira) and data automation tools (SQL, Tableau).
- Domain Expertise: Deep understanding of entity-level risk taxonomies, operational and technology control frameworks (COSO, SOC, NIST), and intercompany MSA/SLA oversight in a regulated bank setting.
- Certifications (Preferred): CERP, or CRMP.
- AI Tool -- Gemini, ChatGPT, or equivalent