{"id":3350602,"url":"https://alion.io/job/capital-com-senior-operational-risk-analyst-2","title":"Senior Operational Risk Analyst","company":{"id":949,"name":"Capital.com","domain":"capital.com","url":"https://alion.io/company/capital","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":82,"open_postings":12,"ghost_share":0,"stale_share":0.667,"repost_share":0.083,"time_to_fill_p50_days":50,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Limassol, Cyprus"],"countries":["CY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":39000,"max_usd":89000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":7681},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[],"status":"live","first_seen_at":"2026-10-27T16:54:53Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T15:46:25Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"As Senior Operational Risk Analyst, you will be a core member of Capital.com's risk function, reporting to the Head of Risk Management. You will run the operational risk cycle across the Group's Cyprus-regulated investment firms: the risk register, the business-wide risk assessment, the RCSA, the operational risk event register, and relevant reporting. ICT and digital operational resilience under DORA sit alongside that work, with framework direction and regulatory sign-off set by the Head of Risk.\nResponsibilities:\nOperational Risk Framework and RCSA: Run the risk register, business-wide risk assessment and risk and control self-assessment cycles for each entity: collect and challenge first-line input, score likelihood and impact, assess control effectiveness, and carry each risk from inherent through to residual.\nOperational Risk Event Management: Maintain the operational risk event register: capture and classify events against the risk taxonomy, complete root-cause analysis, identify repeat patterns, and track first-line remediation through to closure.\nOperational Risk Reporting: Produce the monthly operational risk event report and the operational risk sections of the Risk Committee pack. Monitor key risk indicators against stated appetite and flag adverse trends before a threshold is reached.\nICARA Contribution: Provide the operational risk input to the ICARA for each entity: loss data, scenario analysis, and the operational risk element of the additional own funds and liquidity assessment.\nControl Assessment and Testing: Test whether controls work rather than whether they exist: query platform and warehouse data directly to evidence risk positions, assess control performance, and substantiate event impact instead of relying on first-line summaries.\nDORA and ICT Resilience: Support delivery of the DORA programme across each regulated entity: maintain the ICT risk management artefacts, prepare the material for the ICT risk workstream, and track remediation actions through to closure, under the direction of the Head of Risk.\nICT Incident Classification and Reporting: Prepare major-incident assessments against the DORA classification criteria.\nCT Third-Party and Outsourcing Risk: Carry out vendor and outsourcing risk assessments, prepare critical-or-important-function assessments, and track concentration across ICT service providers.\nAssurance Support: Prepare responses to internal audit findings, external readiness reviews and supervisory observations, assemble the supporting evidence, and track action dates with the owners.\nCross-Functional Coordination: Work closely with Operations, Technology, Information Security, Compliance, Legal and Finance so that risk outputs land in the governance process and escalate on the right trigger.\nRequirements:\nAt least 3 years in risk management within a regulated financial services environment, with a material part of it in operational risk: investment firm, bank, payment institution, or a consulting or audit practice serving them.\nHands-on experience running operational risk framework cycles, including the risk register, business-wide risk assessment and RCSA, with likelihood and impact scoring, control effectiveness assessment and the inherent-to-residual step.\nExperience managing an operational risk event register: capture, classification against a taxonomy, root-cause analysis, and remediation tracking with first-line owners.\nExperience producing operational risk reporting and governance deliverables that reach a committee, a board or a supervisor, including key risk indicators measured against stated appetite, and readiness to own them as you grow into the role.\nWorking knowledge of DORA (Regulation (EU) 2022/2554), with exposure to at least one area: ICT risk management artefacts, incident classification and reporting, ICT third-party risk and the register of information, or resilience testing.\nAn organised approach to tracking regulatory developments across CySEC, ESMA and the EBA, and the ability to set out what a new rule means for the firm.\nA degree in a numerate discipline: economics, finance, mathematics, engineering or similar. CySEC Advanced certification, or willingness to obtain it, is an advantage, as is an operational risk, operational resilience or information security certification.","description_format":"text","description_chars":4322,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Cyprus","iso":"CY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Online Brokerage & Trading Platforms","Forex & CFD Brokers"],"lifecycle":[{"event":"open","at":"2026-10-27T18:26:59Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":50,"reasons":["conf:2","stale_co","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/capital-com-senior-operational-risk-analyst-2","json_url":"https://alion.io/job/capital-com-senior-operational-risk-analyst-2.json","meta":{"generated_at":"2026-10-30T15:51:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3759,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":949},"rest":"https://alion.io/mcp/rest/get_company?id=949"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcapital-com-senior-operational-risk-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcapital-com-senior-operational-risk-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcapital-com-senior-operational-risk-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/capital-com-senior-operational-risk-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcapital-com-senior-operational-risk-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3350602}},{"tool":"search_jobs","arguments":{"company":"capital.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3350602},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}