Manager, Operational Risk Management, ICORM (Legal & Compliance Department)

Responsibilities:

• Review and execute assigned operational risk tools and systems, including key risk indicators and risk and control self-assessment. Keep assigned tools consistently applied across departments.

• Log and follow up incidents and operational risk events from intake through root-cause and remedial action tracking. Maintain the operational loss database, including completeness, accuracy, recoveries and audit trail.

• Assist to keep the operational risk framework aligned with HKMA SPM OR-1, OR-2, TM-G-2 and SA-2, and with head office standards. Assist to review and maintain the operational risk management policies and procedures, and comment on Bank workflows from an operational risk perspective.

• Assist to arrange bank-wide business continuity management and to consolidate BCP practices with operational resilience under OR-2. Support mapping of critical operations and important business services, including key resources, interconnections and tolerances for disruption. Support assessment of departmental plans, drills and resilience scenario tests, and assist departments to adjust arrangements after evaluation.

• Support product due diligence on new products and changes to existing products, and pre-contract and renewal due diligence on outsourcing, vendor and third party arrangements, from an operational risk and resilience perspective.

• Support operational risk stress testing to estimate operational losses under stressed scenarios, and compile the results and loss data needed for the Bank’s operational risk capital work under HKMA requirements.

• Assist to prepare operational risk training, issue risk alerts, and communicate warnings from regulatory and enforcement agencies.

• Assist to prepare operational risk management reports to regulatory authorities, e.g. the annual statement on business continuity and the independent compliance assessment on business continuity planning, and monthly, quarterly and ad hoc reports to head office, senior management and committees.

Requirements:

• Degree holder in Business, Finance or another financial related discipline. Qualification in ECF-ORM (Core Level) is preferred.

• Minimum 4–7 years’ practical experience in operational risk, business continuity management, vendor or third party management or related work.

• Knowledge of operational risk management and a good understanding of banking operations and processes.

• Self-motivated, with strong analytical and problem-solving skills, and results-oriented.

• Team-work oriented, with a proactive manner.

• Proficient in written and spoken English and Chinese, and in MS Office applications. Fluency in Putonghua is an advantage.