Senior Operational Risk Analyst , Business Continuity & Operational Resilience

Why DUCA?

We’re a vibrant, exciting credit union that lives its "profits with a purpose" philosophy in every financial transaction, product, interest rate, and community initiative we offer. Founded in 1954, DUCA has grown from a single branch credit union in Toronto to 19 branches across Southern Ontario with over 85,000 Members we are proud to serve.

We exist to help People, Businesses and Communities Do More, Be More, and Achieve More™.

DUCA (www.duca.com) is distinguished for the following:

• Positive, un-big bank like service experience delivered through Member-facing staff in branch, on the phone (Member-Connect) and via our Mobile mortgage specialists, Wealth Management advisors and Commercial and Business Banking Account Managers.
• Competitive rates.
• Personalized financial solutions, guidance, and service with the lowest possible fees for both Personal and Business Members.
• Profit sharing among Members.
• Multiple ways to bank—online, mobile app, phone/full-service Member Connect Contact Centre, and, of course, in-branch—DUCA is accessible 24/7
• A community philosophy of “profits with a purpose” culminating in the creation of the DUCA Impact Lab (www.ducaimpactlab.com), a charitable foundation committed to helping the credit challenged and underbanked. This led to DUCA's designation as a B-Corp certified organization, the first ever credit union to receive this global recognition.

A career with DUCA means you’ll find endless opportunities to make a difference with your unique abilities and perspectives. Our people live their purpose while helping others Do more, Be more and Achieve more with their money and their lives. At DUCA, you’ll be part of a vibrant and collaborative team where you’ll be supported to excel and make an impact, no matter what role you play.

Senior Operational Risk Analyst , Business Continuity & Operational Resilience

DUCA is looking for a Senior Operational Risk Analyst , Business Continuity & Operational Resilience to join our growing team!

Job Purpose & Summary

The Senior Operational Risk Analyst, Business Continuity & Operational Resilience, is responsible for supporting the design, implementation, and ongoing enhancement of DUCA’s Business Continuity Management (BCM) and Operational Resilience Framework. This role manages all elements of DUCA’s Business and Vendor Continuity Planning and Resiliency program, including leading business impact analyses, continuity planning, resilience testing, and assessments of recovery capabilities across the organization. This position focuses on ensuring that DUCA can maintain delivery of critical business services during disruptive events and makes recommendations related to the associated business continuity and operational risk policies, programs, and processes.

In addition, the role supports Third-Party Risk Management from a business continuity and resilience perspective, ensuring that key vendors maintain recovery capabilities aligned with DUCA’s requirements, while also contributing to broader operational risk management activities.

Key Accountabilities & Duties

Business Continuity & Resilience Program Management

• Support the development, maintenance, and continuous improvement of the Business Continuity Management (BCM) and Operational Resilience frameworks
• Manage the Business and Vendor Continuity Planning and Resiliency Policies, programs, and processes including leading Business Impact Analyses (BIAs) across business functions to identify critical services, recovery time objectives (RTOs), recovery point objectives (RPOs), and key operational dependencies.
• Lead the development, review, and facilitate the approval of Business Continuity Plans (BCPs) and Disaster Recovery Plans (DRPs), ensuring alignment with DUCA’s organizational resilience objectives.
• Maintain a centralized inventory of critical business services, supporting resources, and associated recovery strategies.
• Support the identification of Important Business Services (IBS) and mapping of end‑to‑end dependencies in accordance with regulatory expectations.

Scenario Testing, Exercises, and Continuous Improvement

• Design and execute resilience and continuity testing activities, including tabletop exercises, scenario simulations, and recovery testing.
• Document test outcomes, gaps, and remediation actions, and track progress to closure.
• Analyze disruption scenarios and emerging risks to assess potential operational impacts.
• Drive continuous improvement initiatives to strengthen organizational preparedness and recovery capabilities.

Operational Risk Framework & Tools Support

• Support the execution of core Operational Risk Management tools, including Risk and Control Self-Assessments (RCSA), Key Risk Indicators (KRIs), Operational Risk Events (OREs), and related governance processes.
• Assist business units with identifying operational risks, assessing inherent and residual risk, and documenting key controls.
• Support KRI development, monitoring, and reporting, including threshold calibration and trend analysis.
• Contribute to operational risk event collection, root cause analysis, and remediation tracking.
• Provide input into DUCA’s operational risk reporting and committees, ensuring continuity and resilience risks are appropriately represented.

Third-Party BCP & Resilience Support

• Support vendor risk management activities specifically related to business continuity and operational resilience.
• Evaluate third-party BCPs, disaster recovery capabilities, and resilience attestations for critical vendors.
• Assess vendor recovery objectives against internal requirements and identify gaps or concentration risks.
• Support remediation tracking and escalation for vendors with insufficient continuity capabilities.
• Collaborate with relationship managers and Vendor Risk team to ensure resilience requirements are embedded into onboarding and ongoing monitoring processes.

Regulatory & Governance Support

• Support compliance with applicable regulatory guidance related to Business Continuity and Operational Resilience (e.g., FSRA).
• Assist with regulatory examinations, internal audits, and independent reviews related to BCM, operational resilience, and operational risk management.
• Maintain documentation and evidence to demonstrate program maturity and effectiveness.

Occupational Experience & Education Requirements

• Undergraduate degree in business, finance, or a related field.
• Minimum 4 years’ experience in Operational Risk, Business Continuity, Disaster Recovery, and Operational Resilience within financial services.
• Hands-on experience conducting BIAs, developing BCPs, facilitating RCSA sessions, and coordinating resilience testing.
• Experience reviewing third-party BCP and Disaster Recovery capabilities.
• Experience with risk and governance software is an asset.
• Experience with data analytics, process mapping and design, documentation, testing, and reporting.

Knowledge, Skills & Attributes

• Proven expertise in operational resilience frameworks and regulatory expectations.
• Critical thinking, analytical, and problem-solving skills with the ability to break down complex situations into manageable parts in a systematic manner.
• Strong understanding of Operational Risk Management, Business Continuity, and Operational Resilience.
• Ability to facilitate workshops and engage senior stakeholders.
• Ability to thrive and apply judgement within an environment of ambiguity.
• Ability to translate technical resilience concepts into business-friendly language.
• Strong organizational skills, with the ability to work in a fast-paced environment and manage multiple deadlines and priorities.
• Professional and articulate with well-developed verbal and written communication skills.
• Enjoy working in a team environment but also able to work independently.
• Continually display critical thinking while seeking out process improvement opportunities.
• Proficient in Microsoft Office Suite products.

Working Conditions

Normal office environment with the potential for longer hours given certain demands of the job and reporting deadlines.

Department: Retail Credit

Primary Location: Corporate Office

Employment Status: Full-Time

Hours per Week: 38

Salary: The annual salary range for this position is $69,956 to $87,445. Actual annual base salaries will vary depending on relevant job-related factors such as experience, knowledge, skills, qualifications, and education/training. This position may be eligible for discretionary bonuses.

Number of Existing Vacancies: 1

DUCA is committed to employment equity and encourages applications from all qualified candidates. Recruitment related accommodations will be provided upon request.

Our hiring process includes AI screening for keywords and minimum qualifications. Talent Acquisition Partners review all results.

Qualified applicants are encouraged to submit their application. Applications must include a resume.

We thank all applicants but only those considered for an interview will be contacted.