AVP, Operational Risk Management, ICORM (Legal & Compliance Department)

Responsibilities:

• Review and execute operational risk tools and systems, including key risk indicators and risk and control self-assessment. Keep the tools consistently applied across departments.

• Manage incidents and operational risk events from intake through root-cause and remedial action tracking. Oversee and maintain the operational loss database, including completeness, accuracy, recoveries and audit trail.

• Keep the operational risk framework aligned with HKMA SPM OR-1, OR-2, TM-G-2 and SA-2, and with head office standards. Review and maintain the operational risk management policies and procedures, and comment on Bank workflows from an operational risk perspective.

• Arrange bank-wide business continuity management and consolidate BCP practices with operational resilience under OR-2. Support mapping of critical operations and important business services, including key resources, interconnections and tolerances for disruption. Assess departmental plans, drills and resilience scenario tests, and assist departments to adjust arrangements after evaluation.

• Perform or independently challenge product due diligence on new products and changes to existing products, and pre-contract and renewal due diligence on outsourcing, vendor and third party arrangements, from an operational risk and resilience perspective.

• Conduct operational risk stress testing to estimate operational losses under stressed scenarios, and supply the results and loss data needed for the Bank’s operational risk capital work under HKMA requirements.

• Prepare operational risk training, issue risk alerts, and communicate warnings from regulatory and enforcement agencies.

• Prepare operational risk management reports to regulatory authorities, e.g. the annual statement on business continuity and the independent compliance assessment on business continuity planning, and monthly, quarterly and ad hoc reports to head office, senior management and committees.

Requirements:

• Degree holder in Business, Finance or another financial related discipline. Qualification in ECF-ORM (Professional Level) is preferred.

• Minimum 8–10 years’ practical experience in operational risk, business continuity management, vendor or third party management or related work.

• Knowledge of operational risk management and a good understanding of banking operations and processes.

• Self-motivated, with strong analytical and problem-solving skills, and results-oriented.

• Team-work oriented, with a proactive manner.

• Proficient in written and spoken English and Chinese, and in MS Office applications. Fluency in Putonghua is an advantage.