Sr. Mgr, Ops Enterprise Risk (701889)

Managing Risk within the organization is critical to ensuring that the most appropriate mitigation tactics are in place to maintain company reputation and support our organizations goals and objectives. Given the importance of brand image and customer protection, the Online Services Division (OSD) is looking for an experienced and motivated Risk Manager to join our team in driving Enterprise Risk Management assessment, mitigation, and measurement practices for our organization.
This role is focused on the following:

• Risk Framework- Identifying, mitigating and controlling risks within the overall OSD Risk Program - to include Business Continuity Management (BCM), Information Security, Privacy and Facility Security. Cross Group Collaboration will be required to ensure that all necessary stakeholder and issues are considered prior to full implementation.
• Risk Management- Development and execution of a sustainable processes, business policies and procedures relative to Risk Management.
• Strategic Risk Direction- Accountability for strategic direction, governance, and training and awareness of the OSD- Risk Management Program.

Key Responsibilities and Accountabilities

Risk Framework

Identification and monitoring of risk priorities within the OSD organization.
Establishment of business practices for risk acceptance and approval.
Driving executive awareness of risk improvement planning for OSD.
Coordination point for and representation of OSD in the ERM annual risk assessment.
Development of process to support the risk resolution action plans, as aligned with the agreed upon risks.
Establishment of appropriate commitments, plans and budgets for making improvements and mitigation planning for identified OSD risks.
Management and support of the processes and structural guidelines for critical assessments such as :
Privacy Risk Assessment and OSD Functional Privacy Assessments
Business Impact Analysis and Impact Tolerance process
Security Assessments
Facility Assessments
Business Continuity Management risk assessments
Cross Group Collaboration to include the following areas:
Microsoft Information Security Program
Group Privacy Management Committee
Global Executive Business Continuity Management Committee
Operations Enterprise Risk Management Governance Committee
Internal Audit
Privacy Managers
Operations Enterprise Risk Pillar Management and Focals
Enterprise Risk Management Office

Risk Management

Development of procedures for the identification, measurement, monitoring and reporting of OSD risks.
Identification, development and reporting of trending to evaluate the progress of key risk metrics.
Development of roles and assignment of responsibilities required to support the calendar and frequency for the review and approval of risk procedures.
Development of governance structure to support OSD- Risk Management processes and procedures.
Providing assistance to business leadership to understand risk as it relates to their business and make informed business decisions involving risk acceptance.
Providing leadership support as an authoritative decision maker for risk in the business and as required, delegating decision-making responsibilities where necessary.

Strategic Risk Direction

Development of commitments and strategic plans (to include resources and budgets) required to support the OSD- Operations Risk Management program.
Review and management of operational risk expectations and assumptions which may impact the strategic direction of the OSD Group organization.
Oversee and manage risk mitigation activities for the OSD organization’s Information Security, Privacy, BCM and Facility Security practices.

Qualifications
1. 7+ years experience working on large, complex projects with a proven track record of delivering results as per requirements. Ability to own and drive programs and initiatives by working through ambiguity is a must.
2. Strong operational experience in online services and business related background preferred.
3. Strong leadership and communication skills, as well as a strong track record of working collaboratively with senior leaders across the organization.
4. Previous experience in enterprise risk management required.
5. Previous experience with the following risk management disciplines preferred:
a. Business Continuity Management
b. Privacy
c. Information Security
d. Facilities Management