Moody's is a global integrated risk assessment firm that empowers organizations to make better decisions.
- Team/Department Description:
Moody's Corporation, Moody's Shared Services, Risk Management, Global Business Resilience
The Moody's Enterprise Risk Management (ERM) team is part the Audit, Risk and Controls Department (ARC) within
Moody's Shared Services (MSS) dedicated to establishing and maintaining a firm-wide risk management culture and
framework embedded within the business for the timely identification, management and reporting of key financial,
operational, reputational, and strategic risks. ERM is designed to establish a common, organization wide.
understanding of risk management through a consistent framework that seeks to identify and assess risks and report them to senior management to ensure appropriate prioritization and management and to incorporate risk.
understanding into decision making.
- Role/Responsibilities:
The AVP - Business Resilience Lead will report to the VP - Global Business Resilience Leader/Manager. The position is responsible for the management of a small team to coordinate across three business entities (including the regulated Ratings business) and partnering with the Crisis Program part of the team.
This role is responsible for delivering Global Business Resilience (GBR) program across MCO. This includes managing the lifecycle of including the review and approval of the Operational Resilience structure (Important Business Services, Impact Tolerance and supporting Processes and dependency mapping).
The team will lead on all aspects of Operational Resilience and Business Continuity across the business, ensuring that resilience-by-design principles are embedded across the organization. The team will work with the various areas within ARC and partnering with Technology, People, Procurement and Compliance to meet this objective.
Drive the review, creation and execution of Important Business Services, impact tolerance and evolve approaches to Business Impact Analysis and Business Continuity Planning, incident response, assurance and lessons learned. Maintain GBR Policy & Framework documentation.
- Collaborate with Second Line functions to further the development of the Business' end to end resilience framework, governance and controls, particularly supporting local supervisory oversight and governance processes are adequately in place, maintained, and tested in-line with MCO overall resiliency strategy.
- Provide support to the ERM Committees to ensure a robust resilience assessment of gaps in dependencies capabilities to support critical processes.
- Delivery of a consistent First Line of Defense approach to severe but plausible scenario testing / exercising, stress testing, and scenario analysis - and to leverage different types of exercising / testing for relevant stakeholders at all levels and lines of business.
- Enhance Moody's Operational Resilience by working with in-business control resources to co-ordinate key control remediations across the lines of business.
- Management Software to drive visibility, efficiency for the Business Plan and Process Owners
- Support business areas during incidents and invocation of Business Continuity Plans due to business impacting events.
- Close partnership with the GBR Crisis Program team, supporting live events, training exercises and sharing of knowledge to provide backup to each other.
- Provide information via reports to ARC Governance for ongoing data metrics contributing to the metrics for risk management, mitigation, and prevention.
- Responsible for the Roadmap of the Operational Resilience (BIA & BCP) Fusion Software in partnership with GRC Governance Team.
- Meet compliance targets for all applicable regulatory or client requirements.
- Partner with Risk teams to support the development of understanding our third-party risk, technical/ digital data risk, concentration risk and how we engage with them to enhance resilience mutually.
- Work with the Integration Management Office to plan the integration of mergers and acquisitions from a Business Resilience perspective.
- Qualifications:
- Graduate degree and/or relevant professional experience within Resilience
- Professional certification (BCI, DRI) in business continuity management a plus
- 10+ Years experience working across an organization to develop and implement Operational Resilience structure and proven experience in business continuity and crisis response management.
- Experience working for a regulated company (preferably financial services firm) would be beneficial.
- Demonstrated ability to effectively interface with a diverse, global and cross-functional teams and large-scale projects. Ability to influence cross-functionally and enterprise-wide.
- Prior experience working with senior leaders in a functional or strategic capacity.
- An ability to understand business operations from the top level down and bottom-up structured thinking to unders