> Markdown version of [/jobs/ext/4588091-sr-leader-operational-it-risk](https://www.wearedevelopers.com/jobs/ext/4588091-sr-leader-operational-it-risk). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Leader, Operational & IT Risk

- **Company:** loanDepot
- **Location:** Beverly Hills, CA, United States
- **Experience:** Expert
- **Salary:** $124,000 - $170,000
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Control Objectives for Information and Related Technology (COBIT), Software Documentation, Cyber Security, Information Systems, Data Governance, Information Technology Operations, Software Engineering, Technical Debt, Information Technology
- **Published:** November 5, 2026
- **Apply:** https://www.careerbuilder.com/job-details/sr-leader-operational-it-risk-beverly-hills-ca--d2e9a086-193d-44a6-b64c-0d33ac11122b

## About the Role

Risk, Risk, Risk Analysis, Risk Management, Legal, Business Processes, Change Management, Internal Audit, Technical Leadership, Computer Security, * Bachelor's Degree in Risk Management, Business Administration, Information Systems, Cybersecurity, Computer Science, Finance, or related field required. Master's Degree preferred.

 * Minimum of seven (7) + years of experience with operational risk management, IT/technology risk oversight, ERM programs, RCSA, control assessment, issue management, risk reporting, or governance routines required.
 * Minimum of five (5) + years of experience leading risk programs, cross-functional risk initiatives, or teams, including setting priorities, managing deliverables, coaching employees, and influencing stakeholders required.
 * Ability to define and manage risk taxonomies, issue taxonomies, control libraries, workflow requirements, data standards, dashboards, and reporting outputs within a GRC/IRM platform or similar system of record.
 * Demonstrated experience operating within a three lines of defense model, including second-line oversight, independent challenge, risk monitoring, control evaluation, governance, escalation, and reporting responsibilities required.
 * Hands-on experience with GRC/IRM platforms, system-of-record workflows, risk and control libraries, issue management modules, risk assessment modules, dashboards, data quality routines, user acceptance testing, and/or platform implementation activities required.
 * Strong analytical skills with ability to evaluate complex data, identify trends, assess risk exposure, develop executive-ready insights, and recommend timely escalation or remediation actions.
 * Working knowledge of applicable regulatory expectations and industry frameworks preferred, including GLBA, NYDFS Cybersecurity Regulation, CFPB expectations, NIST Cybersecurity Framework, COBIT, COSO, ISO 27001/27002, and Fannie Mae/Freddie Mac requirements as applicable.
 * Experience in the mortgage, consumer lending, servicing, banking, fintech, or broader financial services industry preferred.
 * Professional certification preferred, such as CRISC, CISM, CISSP, CISA, CGEIT, COBIT, ITIL, PMP, RIMS-CRMP, or another risk, technology, audit, compliance, or project management credential.
 * Travel may be required up to 10% based on business, audit, regulatory, implementation, or governance needs.

## Description

Responsible for leading loanDepot's second-line Operational Risk and IT Risk Oversight function within Enterprise Risk Management. This role oversees the Operational Risk Framework, RCSA governance, operational risk event and issue governance, technology risk oversight, key risk indicator monitoring, control monitoring, risk reporting, and the ERM Governance, Risk, and Compliance (GRC) / Integrated Risk Management (IRM) platform used to support risk and issue workflows. The Sr. Leader provides independent oversight and credible challenge of first-line operational and technology risk management activities, including areas such as business process risk, change management, technology risk, information security, third-party technology risk, and emerging risk. This role partners with business leaders, Technology, Information Security, Compliance, Legal, Internal Audit, and enterprise governance forums to strengthen risk identification, assessment, monitoring, escalation, and reporting across
the enterprise.

Responsibilities:

 * Leads and matures the second-line Operational Risk and IT Risk Oversight programs, including program strategy, roadmap, standards, governance routines, and alignment with the Enterprise Risk Management Framework.
 * Builds, maintains, and enhances Operational Risk Framework components, including RCSA methodology, operational risk event standards, issue governance expectations, control monitoring practices, risk taxonomy alignment, key risk indicators, reporting protocols, and related GRC/IRM platform requirements.
 * Helps business and technology leaders identify what could prevent successful execution of strategic initiatives, what assumptions require validation, what mitigations or controls are needed, and what conditions would allow the Company to move forward safely and confidently.
 * Balances defensive risk management activities, such as prevention, containment, recovery, compliance, monitoring, and control oversight, with forward-looking risk enablement that helps the Company evaluate opportunities, remove avoidable execution barriers, and minimize strategy implementation risk.
 * Provides independent oversight and credible challenge of first-line operational and technology risk assessments, risk acceptances, exceptions, treatment plans, remediation activities, control design, control effectiveness, and business decisions that may impact the Company's risk profile.
 * Oversees enterprise RCSA governance, including consistency of assessment approach, risk and control inventory quality, control linkage, documentation standards, thematic analysis, challenge routines, system-of-record usage, and reporting of material operational risk exposures.
 * Establishes oversight routines for operational risk events and issues, including event intake and triage, severity evaluation, root cause themes, corrective action oversight, timeliness monitoring, escalation criteria, workflow standards, and lessons learned reporting.
 * Oversees technology risk coverage across enterprise technology domains, including change management, application development, infrastructure, cloud, IT operations, data and technology assets, technology resilience, third-party technology services, technical debt, and emerging technologies.
 * Coordinates with Information Security and Technology leaders to ensure cyber, information security, technology resilience, incident, vulnerability, and control themes are appropriately reflected in ERM reporting and governance.
 * Owns and manages ERM GRC/IRM platform business administration responsibilities for assigned ERM capabilities, including risk assessment, RCSA, control monitoring, issue management, operational risk event, KRI, dashboard, and reporting modules, as applicable.
 * Partners with Technology, Information Security, Compliance, Internal Audit, business stakeholders, and vendor or implementation partners to ensure GRC/IRM platform capabilities support second-line oversight, traceability, data quality, timely escalation, and consistent enterprise reporting.
 * Monitors key operational and technology risk indicators, risk appetite and tolerance thresholds, controls monitoring results, issue trends, operational loss/event trends, audit and examination findings, and emerging risks to identify areas requiring escalation or management attention.
 * Develops and delivers clear, actionable reporting for executive management, the Enterprise Risk Management Committee, the Board or Board committees, regulators, auditors, and other governance forums, including risk themes, metrics, challenge outcomes, remediation status, and forward-looking risk insights.
 * Reviews significant technology and business transformation initiatives early in the lifecycle to identify operational, technology, customer, regulatory, third-party, data, resilience, and execution risks before launch or major decision points.
 * Supports regulatory examinations, investor due diligence, internal audits, external audits, and management responses related to operational risk, technology risk, issue management, business resilience, and enterprise risk governance.
 * Leads, coaches, and develops assigned team members, including the IT Risk Leader and Ops Risk Specialist, by setting priorities, reviewing deliverables, providing subject matter guidance, supporting professional development, and ensuring effective execution of oversight activities.
 * Performs other duties and projects, as assigned.