Quality and Risk Management Senior Associate- Jamaica

Quality and Risk Management- Senior Associate

The opportunity

The Quality and Risk Management Senior Associate is accountable for assessing and monitoring EY operations to ensure they comply with safety, quality, and environmental standards. This involves internal auditing, reviewing quality reports, production inspections, and formulating risk mitigation plans.

Our EY Jamaica office is currently recruiting for a new Quality and Risk Management Senior Associate to join our team.

Key Responsibilities

• Prepare, maintain and formally file all AML administrative documentation as noted in the AML Compliance monitoring plan. 3. This will include but not be limited to the preparation of minutes of internal & external meetings, including EY Caribbean (EYC) AML leadership, and resolutions of Board minutes.
• Prepare follow-up points from all meetings held, and action in a timely manner
• Prepare and update the annual Training Plan as per the AML Compliance Monitoring Plan.
• Schedule of annual and sporadic trainings based on the annual Training Plan
• Be the primary contact, and where not applicable, be the main support for AML audits being performed by the local regulator or by the Global Internal Audit team.
• Prepare and share AML e-alerts to all EYC Staff which may form notifications, updates or reminders
• Prepare ad hoc AML documentation due to needs of the business or changes due to update of the AML legislation
• Liaise and evaluate with engagement teams all matters with regards to suspicious activity reports (SARs)
• Liaise and report to Senior personnel in EYC Risk Department
• Within the EY related Risk Management tool, respond and update all requests with respect to the Financial Crime Compliance Risk Category, where the specific risk is Anti-money Laundering Compliance.  
• Attend all Global Compliance calls regarding all risk matters, and action items accordingly as assigned.
• Request quarterly report about validity of AML documentation and liaise with engagement teams to request current AML KYC documentation
• Run the AML Tool reports and perform actions
• Liaise with the Global Infrastructure team regarding updates of the EY related Risk Management tool, the questionnaire, implementation, testing etc.
• Prepare and facilitate face to face or virtual AML training sessions for new hires, annual and ad hoc sessions. 
• The AML action items refer to EY Caribbean.

Data Retention

• Build professional relationships with the EY Global Data Retention team and the various local data retention/storage/filing officials in the various EYC territories
• Be familiar with the ISQM1 controls in relation to data retention, and the documents required to be formally filed/stored for ISQM1 purposes (i.e. monitoring)
• Be familiar with the ERM monitoring controls for data retention and populate the ERM tool when required. Ensure the monitoring controls have monitoring activities which are executed by the local jurisdictions 
• Tailor the Global Data Retention checklist to the EY Caribbean on an action plan to guide the various territories. This is not limited to the checklist, but other document made available by the Global Data Retention team. 
• Initiate meeting invites for quarterly calls with the Executive Leadership concerning the data retention status
• Preparation of discuss points regarding the matters being experienced in each territory, and which need to be addressed by the EYC Risk Management team and/or the Global Retention team for support
• Create milestones of progress for each territory
• Review as a team the system notes prepared in each territory, and confirm if it may be applicable to all jurisdictions
• Perform annual assessment of any changes to the local legislation concerning statutes of limitation for the various client regulators within each jurisdiction. This will include any data retention policy
• Present update to the wider EYC Risk Management during the monthly meetings
• Attend the Global Data Retention calls and follow-up on any action items
• Documentation of the data approval/deletion/exemption process which require PPD approval to retain documentation past the required EY Global Retention date
• Submit any exemptions to the EY Global Retention via the EY related Risk Management tool and ensure approval in a timely manner
• Review of the purged exception listing of ARC engagements
• Ensure all vendors supplying external record management tools/applications have been assessed via the EY related Management tool. This specific tool is to be renewed on an annual basis.
• Obtain and store copies of all vendors’ contracts who are supplying external record management tools/applications to EY Caribbean
• Understand the process, via the DRIVE Tool, on the action items to follow when data is lost/stolen/burnt/disappeared etc.
• Facilitate and be the main contact for any local or EY initiated audit of the data retention process. Close and remediate all matters arising from the audit or equivalent.
• Build and maintain knowledge of the policies, procedures and databases of a professional services firm.
• Any other ad hoc/ related duties.

Data Protection

The established Data Protection laws, in the various EYC jurisdictions, are based on the requirements of the General Data Protection Regulation (“GDPR”). Some EYC countries do not have mature data protection laws. Conversely, EY Global’ s data protection laws are outlined in the Binding Corporate Rules and are applicable to each EY member firm

• Maintain Governance Structure
• Maintain Personal Data Inventory and Data Transfer Mechanisms
• Maintain Internal Data Privacy Policy
• Embed Data Privacy into Operations
• Maintain Training and Awareness Program
• Manage Information Security Risk
• Manage Third-Party Risk
• Maintain Notices
• Respond to Requests and Complaints from Individuals
• Monitor for New Operational Practices
• Maintain Data Privacy Breach Management Program
• Monitor Data Handling Practices

Knowledge and Skills Requirements:

• Excellent written and verbal communication skills
• Ability to communicate well at all levels, face-to-face and in writing
• Self-motivated, flexible team player
• Strong research, analytical and interpretation skills
• proficient computer skills
• Ability to work to tight deadlines
• Ability to working within a diverse and multicultural environment
• Familiarity with the following regulations in various EYC jurisdictions:
  • The Money Laundering and Financing of Terrorism (Prevention and Control) Act
  • Proceeds of Crime Act (POCA)
  • Terrorism Prevention Act (TPA)
  • Guidance Notes on the Prevention of Money Laundering and Countering the Financing of Terrorism, Proliferation and Managing Related Risks issued by the various regulators or local Governments
  • FATF 40 Recommendations – Interpretive Note to Recommendation 18 (1c)
  • Data Protection Act or variations thereof in the various EYC locations

To qualify, candidates should possess:

• Bachelor's degree in Law/Business Records Management/Risk Management/Cyber security or a related discipline.
• A certificate in anti-money laundering, data protection, project management, paralegal or a related discipline would be an asset but not requirement.
• Experience in an auditing environment would be an asset
• A minimum of 3-5 years' experience in a financial services industry.
• Excellent knowledge of the legislations.
• Excellent knowledge of Microsoft Office Suite.
• Excellent verbal and written communication skills. Strong customer service skills.
• Project management skills would be an asset.
• Ability to act with integrity, professionalism, and confidentiality.
• Strong ethics, time management skills and reliability.