Description

The Company

Lead operational risk, RCSA, incident management, HKMA gap analysis, outsourcing risk, BCM, operational resilience, and regulatory projects.

The Role

Operational Risk Management

• Support the Head of Risk and Regional Head of Operational Risk in overseeing the Branch's operational risk management framework.
• Coordinate and facilitate annual Risk & Control Self-Assessment (RCSA) exercises across all business and support functions.
• Manage and monitor the operational incident reporting process, ensuring timely escalation, investigation, and remediation of risk events.
• Prepare regular operational risk reports and management information for senior management and relevant committees.
• Conduct gap analyses against HKMA Supervisory Policy Manuals (SPMs), regulatory requirements, and industry best practices, and recommend enhancement measures where necessary.

Outsourcing & Third-Party Risk Management

• Oversee the Branch's outsourcing and third-party risk management framework to ensure compliance with regulatory expectations and internal policies.
• Perform ongoing monitoring and risk assessments of outsourced service providers and third-party vendors.
• Conduct periodic reviews of outsourcing agreements and vendor contracts to ensure appropriate controls and risk mitigation measures are in place.
• Support due diligence exercises and maintain relevant outsourcing governance documentation.

Business Continuity Management (BCM) & Operational Resilience

• Assist in maintaining and enhancing the Branch's Business Continuity Management framework and operational resilience programme.
• Coordinate regular reviews, testing, and updates of Business Continuity Plans (BCP) and related procedures.
• Work closely with the Regional BCM Manager to implement BCM initiatives, resilience assessments, and regulatory-driven requirements.
• Support crisis management exercises and business continuity testing activities.

Project & Governance Support

• Partner with the Deputy Chief Executive on various strategic and regulatory initiatives.
• Support projects relating to Deposit Protection Scheme (DPS), Culture and Risk Awareness Framework (C-RAF), service level agreements, policy reviews, and other governance-related matters.
• Assist in the development, review, and update of internal policies, procedures, and risk governance documents.
• Participate in ad hoc projects and assignments as required.

Your Profile

• Bachelor's degree in Finance, Business Administration, Risk Management, or a related discipline.
• Minimum 5 years of operational risk, enterprise risk, internal control, or related experience gained within the banking industry.
• Solid understanding of operational risk frameworks, risk and control assessments, incident management, and regulatory requirements.
• Familiarity with HKMA regulations, Supervisory Policy Manuals (SPMs), and industry best practices.
• Strong analytical, problem-solving, and stakeholder management skills.
• Excellent written and verbal communication skills with the ability to interact effectively across all levels of the organization.
• ECF-Operational Risk Management (Core or Professional Level) qualification is highly preferred.
• Fluent in English; Cantonese and/or Mandarin would be an advantage.

Apply Today

To apply online (Word attachment only), please click the 'Apply' button. Please note that only short-listed candidates will be contacted.

Reference Number: 67010-0013471775

By clicking 'apply', you give your express consent that Robert Half may use your personal information to process your job application and to contact you from time to time for future employment opportunities. For further information on how Robert Half processes your personal information and how to access and correct your information, please read the Robert Half privacy notice: https://www.roberthalf.com/hk/en/privacy. Please do not submit any sensitive personal data to us in your resume (such as government ID numbers, ethnicity, gender, religion, marital status or trade union membership) as we do not collect your sensitive personal data at this time.