Vice President, Operational Risk Management (Legal & Compliance Department)

Responsibilities:

• Responsible for managing operational risk across the bank by establishing and maintaining the operational risk management framework, including its policies and procedures, to identify, assess, monitor, control, and mitigate risks.

• Develop, review, and optimize operational risk management tools and systems, including Key Risk Indicators (“KRI”), Risk and Control Self-Assessment (“RCSA”), Operational Risk Events (“ORE”), and the Operational Risk Management System (“ORMS”).

• Analyze operational risk-related data to evaluate the effectiveness of existing monitoring processes in mitigating operational risks and develop response plans accordingly.

• Provide professional advice on operational risk to departments, including conducting operational risk assessments for new, existing, and modified business products.

• Conduct the gap analysis and close the gap to ensure the operational risk management framework is aligned with HKMA SPM Module “Operational Resilience” (OR-2) and “Business Continuity Planning” (TM-G-2).

• Lead the bank-wide development of Business Continuity Management (BCP) efforts. Assess the effectiveness, practicality, and compliance of departmental Business Continuity Plans (BCP Plans) and drills with local regulatory requirements and the bank’s BCP policies. Assist departments in making adjustments based on evaluation results.

• Design and execute operational risk stress testing.

• Review operational risk management training programs and conduct training, issue risk alerts to relevant departments regarding identified risk points, and communicate risk warnings from regulatory and enforcement agencies to foster a risk-aware culture.

• Serve as a communication channel with regulatory agencies.

• Responsible for submitting operational risk-related reports to regulatory authorities, including the “Annual Statement on Business Continuity” and the “Independent Compliance Assessment on Business Continuity Planning (ICA).”

• Research, develop, and implement Basel III requirements, adopting the latest Standardized Approach to calculate operational risk capital.

• Act as a bridge between CMB Wing Lung Bank and the parent bank’s operational risk team, coordinating operational risk management efforts with the head office.

• Review various management reports submitted to Head Office, Senior Management, and committees on a regular as well as ad hoc basis

Requirements:

• Degree holder in Business / Finance or other financial related discipline

• Minimum 10 years’ of practical experience in business continuity management, operational risk, or related work experience

• Qualification in ECF is preferred

• Holder of Certified Operational Risk Management Professional (CORP), Associate Operational Risk Management Professional (AORP), Certified Internal Auditor (CIA), PMP or FRM is an advantage

• Sound knowledge of regulatory requirements related to business continuity management, operational risk, and operational resilience

• Knowledge in business continuity planning or operational risk management and good understanding of banking operations and processes

• Good understanding of information system, technology infrastructure, and disaster recovery

• Proficient in written English and Chinese and MS Office Applications

• Proficient in spoken both English and Chinese; fluency in Putonghua is an advantage

• Candidate with less experience will be considered as junior position