1

Operational Risk Management Jobs in Massachusetts

... operational risk, or IT risk management Core Skills & Knowledge: * Interest in business continuity and operational resilience practices (BIAs, recovery strategies, dependency mapping, exercises, and ...

... operational risk, or IT risk management Core Skills & Knowledge: * Interest in business continuity and operational resilience practices (BIAs, recovery strategies, dependency mapping, exercises, and ...

We collaborate with Finance, Claims, Operations, Marketing and Risk Management, among other functions. As an AIG actuary, you will be challenged and encouraged to reach your greatest potential to ...

Summary We're looking for a Clinical Risk Manager who is passionate about patient safety ... Management, Office of Patient Experience and departmental quality and operations leaders to ...

next page

Showing results 1-20

Operational Risk Management information

See Massachusetts salary details

$51.3K

$131.8K

$258.8K

How much do operational risk management jobs pay per year?

As of Jun 22, 2026, the average yearly pay for operational risk management in Massachusetts is $131,825.00, according to ZipRecruiter salary data. Most workers in this role earn between $80,300.00 and $173,600.00 per year, depending on experience, location, and employer.

What does an operational risk manager do?

An operational risk manager identifies, assesses, and monitors risks that could disrupt a company's operations, such as process failures, fraud, or system outages. They develop strategies to mitigate these risks, ensure compliance with regulations, and often use tools like risk assessment frameworks and data analysis. Their role helps protect the organization from financial loss and reputational damage.

Is operational risk management a good career?

Operational risk management is a valuable career that involves identifying, assessing, and mitigating risks within an organization to ensure stability and compliance. It often requires strong analytical skills, knowledge of industry regulations, and certifications such as ORM or FRM. The field offers opportunities for advancement and is essential across various industries, including finance, healthcare, and manufacturing.

What is the highest paying risk management job?

The highest paying risk management roles are often senior positions such as Chief Risk Officer (CRO) or Director of Risk Management, with salaries exceeding $200,000 annually. These roles require extensive experience, advanced certifications like FRM or PRM, and strong leadership skills in overseeing enterprise-wide risk strategies.

What is the difference between Operational Risk Management vs Risk Analyst?

AspectOperational Risk ManagementRisk Analyst
CredentialsCertifications like FRM, CRM, or RIMS; relevant degrees in finance, risk management, or businessSimilar certifications; degrees in finance, economics, or related fields
Work EnvironmentCorporate offices, financial institutions, or industries with risk management departmentsFinancial firms, consulting agencies, or corporate risk teams
Employer & Industry UsageUsed across banking, insurance, and large corporations to manage operational risksCommonly employed in finance, insurance, and consulting to analyze risk data

Operational Risk Management focuses on identifying, assessing, and mitigating risks related to daily business operations. Risk Analysts analyze data to evaluate potential risks and support decision-making. While both roles require similar credentials and work environments, Operational Risk Managers oversee comprehensive risk strategies, whereas Risk Analysts focus on data analysis and risk assessment.

What are the key skills and qualifications needed to thrive as an Operational Risk Manager, and why are they important?

To thrive as an Operational Risk Manager, you need strong analytical abilities, knowledge of risk assessment frameworks, and typically a degree in finance, business, or a related field. Familiarity with risk management software, regulatory compliance systems, and certifications like FRM or ORM are commonly required. Exceptional communication, problem-solving, and stakeholder management skills help you influence business processes and foster a risk-aware culture. These skills ensure the effective identification, mitigation, and communication of risks, safeguarding organizational assets and compliance.

What is operational risk management?

Operational risk management is the process of identifying, assessing, and controlling risks that arise from an organization’s day-to-day operations. These risks can include system failures, human errors, fraud, or external events that could disrupt business processes. Effective operational risk management helps organizations minimize losses and ensure business continuity by implementing controls, monitoring processes, and developing contingency plans. It is an essential component of overall risk management in industries such as finance, healthcare, and manufacturing.

What are common challenges faced by professionals in Operational Risk Management, and how can they be addressed?

Professionals in Operational Risk Management often face challenges such as identifying emerging risks, ensuring regulatory compliance, and fostering a risk-aware culture across departments. These challenges can be addressed by staying updated on industry regulations, implementing robust risk assessment tools, and promoting open communication with business units. Regular training and collaboration with other risk management functions also help in proactively managing potential operational threats and ensuring organizational resilience.

What jobs can I get with frm?

With an FRM (Financial Risk Manager) certification, you can pursue roles such as risk analyst, risk manager, credit risk analyst, market risk analyst, and operational risk manager. These positions typically involve assessing financial risks, developing risk management strategies, and using tools like risk modeling and data analysis software.
What are popular job titles related to Operational Risk Management jobs in Massachusetts? For Operational Risk Management jobs in Massachusetts, the most frequently searched job titles are:
What job categories do people searching Operational Risk Management jobs in Massachusetts look for? The top searched job categories for Operational Risk Management jobs in Massachusetts are:
Infographic showing various Operational Risk Management job openings in Massachusetts as of June 2026, with employment types broken down into 1% As Needed, 79% Full Time, 14% Part Time, 3% Temporary, 2% Contract, and 1% Nights. Highlights an 93% Physical, 3% Hybrid, and 4% Remote job distribution, with an average salary of $131,825 per year, or $63.4 per hour.
Technology Risk & Continuity Analyst

Technology Risk & Continuity Analyst

GMO

Boston, MA • On-site

$80/hr

Full-time

Medical, Dental, Life, Retirement, PTO

Posted 21 days ago


Job description

Company Profile
 
Founded in 1977, GMO is a global investment manager committed to delivering superior long-term investment performance and advice to our clients. We offer investment strategies and solutions where we believe we are positioned to add the greatest value for our investors. These include multi-asset class, equity, fixed income and alternative offerings.
 
We manage approximately $80bn for a client base that includes many of the world's most sophisticated institutions, financial intermediaries, and private clients. Industry-wide, we are well known for our focus on valuation-based investing, willingness to take bold positions when conditions warrant, and candid and academically rigorous thought leadership. Jeremy Grantham, GMO's Co-Founder and Long-Term Investment Strategist, is renowned as an expert in identifying speculative investment bubbles and also as a leading climate investor and advocate.
 
GMO is privately owned and employs over 430 people worldwide. We are headquartered in Boston, with additional offices in Europe, Asia and Australia. Our company-wide culture emphasizes commitment to clients, intellectual curiosity, and open debate. We celebrate and respect our differences, while embracing and valuing what each of us brings to work, as we know that diverse teams in an inclusive, caring environment achieve higher engagement and better client results.
 
Please follow the prompts included in this job posting to apply. The application window for this role is anticipated to remain open until the job is filled, or as otherwise determined by GMO.
 

Overview:

As a key member of the Security Risk & Audit team, the Technology Risk & Continuity Analyst supports the firm's security risk, business continuity, and incident management programs, contributing across prevention, preparedness, and response activities.

This role performs core security risk functions such as risk and control support, audit readiness, access review coordination, and security awareness enablement. It also supports the development, maintenance, and testing of business continuity and incident response plans, including coordinating exercises and tracking remediation activities.

The analyst monitors threats and incidents, supports resilience and training platforms, and contributes to audit and due diligence efforts. Working closely with technology, risk, and business stakeholders, this role provides broad organizational exposure while helping ensure the firm is prepared for operational disruptions and cyber events, and continually improving its security posture.

We value individuals who are reliable, curious, collaborative, proactive, and strong communicators-professionals who enjoy problem-solving and are eager to build hands-on experience across security risk management, continuity planning, and incident management.

Primary Responsibilities:

Business Continuity

  • Work with all areas of the firm to map critical service dependencies and document recovery strategies through the BIA process, gathering recovery requirements, and identifying single points of failure
  • Support maintenance of Business Continuity and Incident Response Plans through regular reviews and exercises, with a focus on continuous improvement
  • Maintain program documentation including incident and exercise reporting, program metrics and reports for a variety of stakeholders
  • Develop and maintain BCP standards and templates.
  • Participate in Business Continuity and risk forums
  • Identify emerging risks (e.g., regulatory changes, natural and man-made risk) and perform risk assessments.
  • Administer and maintain the Riskonnect Resilience platform including monitoring platform updates, attending vendor training, and managing the vendor relationship

Security & Risk Management

  • Monitor IT incidents and document significant events
  • Prepare incident summaries for internal tracking and reporting
  • Coordinate security awareness programs via Learning Pool, including onboarding, annual training, and phishing simulations
  • Support internal and external audits by collecting evidence, documenting control activities, and maintaining audit artifacts
  • Assist with annual program reviews and audit readiness activities
  • Respond to client due diligence requests and RFPs, leveraging knowledge bases and SMEs as needed
  • Participate in vendor risk assessments, onboarding reviews, and ongoing monitoring of critical vendors
Job Requirements:
  • Bachelor's degree in Cybersecurity, Information Technology, Risk Management, Business Continuity, or a related field (or equivalent experience)
  • 2-5 years of experience in cybersecurity, business continuity, disaster recovery, operational risk, or IT risk management
Core Skills & Knowledge:
  • Interest in business continuity and operational resilience practices (BIAs, recovery strategies, dependency mapping, exercises, and issue remediation)
  • Familiarity with resilience or GRC platforms (e.g., Riskonnect or similar tools)
  • Ability to master learning management systems and security awareness training programs (e.g., Learning Pool)
  • Understanding of incident management frameworks and IT service management tools (e.g., ServiceNow)
  • Knowledge of client and third-party due diligence processes
  • Familiarity with threat intelligence sources and relevant frameworks/standards (e.g., NIST, ISO 22301, ITIL) is a plus
Professional Skills:
  • Strong written and verbal communication skills, with the ability to clearly document plans, exercises, and incidents
  • Excellent organizational skills and attention to detail, with the ability to manage multiple concurrent workstreams
  • Ability to collaborate across technology, risk, compliance, and business teams
  • Comfort facilitating discussions (e.g., tabletop exercises, walkthroughs), capturing outcomes, and driving follow-through
  • Continuous improvement mindset with the ability to learn, document, measure, and iterate
Certifications (Preferred):
  • ABCP, CBCP, Security+, or similar certifications are a plus
$100,000 - $125,000 a year

This is a reasonable, good faith estimate of the current salary range for this role. GMO's salary range accounts for a wide array of factors that are considered in making compensation decisions including but not limited to skill sets and market demand for skills; level of experience and training; specific qualifications, performance, time in role/company, geographic location, and other business and organizational needs.

In addition, this position is eligible for a discretionary annual bonus award, which award may be determined by individual, team, department and firm performance, and is subject to the terms of GMO's compensation plan. This position is also benefits eligible. GMO's comprehensive benefits program includes medical insurance, dental insurance, life insurance, long-term disability coverage, a 401(k)/profit-sharing retirement plan, open paid time off, leaves of absences, dependent care resources, tuition reimbursement, charitable gifts matching, flexible spending accounts, and commuter benefits.

GMO is committed to the recruitment, employment, and promotion of all candidates equally, regardless of an individual's gender, race, color, national origin, ancestry, age, religion, pregnancy, marital status, sexual orientation, gender identity or expression, military or veteran status, genetic information, physical or mental disability (except where such disability is a bona fide occupational disqualification) or any other classification protected under federal, state or local law.

GMO will not offer visa sponsorship for this opportunity.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
apply for this job

GMO logo

About GMO

Sourced by ZipRecruiter

Industry

Finance and insurance

Company size

501 - 1,000 Employees

Headquarters location

Boston, MA, US

Year founded

1977

Social media