VP, Operational Risk Management, ICORM (Legal & Compliance Department)

CMB Wing Lung Bank Limited

Responsibilities:

Own and oversee operational risk tools and systems, including key risk indicators and risk and control self-assessment. Keep the tools consistently applied across departments.
Own incident and operational risk event management from intake through root-cause and remedial action tracking. Oversee and maintain the operational loss database, including completeness, accuracy, recoveries and audit trail.
Keep the operational risk framework aligned with HKMA SPM OR-1, OR-2, TM-G-2 and SA-2, and with head office standards. Review and maintain the operational risk management policies and procedures, and comment on Bank workflows from an operational risk perspective.
Direct bank-wide business continuity management and the consolidation of BCP practices with operational resilience under OR-2. Oversee mapping of critical operations and important business services, including key resources, interconnections and tolerances for disruption. Assess departmental plans, drills and resilience scenario tests, and require departments to adjust arrangements after evaluation.
Endorse or independently challenge product due diligence on new products and changes to existing products, and pre-contract and renewal due diligence on outsourcing, vendor and third party arrangements, from an operational risk and resilience perspective.
Oversee operational risk stress testing to estimate operational losses under stressed scenarios, and supply the results and loss data needed for the Bank’s operational risk capital work under HKMA requirements.
Oversee operational risk training, the issue of risk alerts, and communication of warnings from regulatory and enforcement agencies.
Oversee operational risk management reports to regulatory authorities, e.g. the annual statement on business continuity and the independent compliance assessment on business continuity planning, and monthly, quarterly and ad hoc reports to head office, senior management and committees.

Requirements:

Degree holder in Business, Finance or another financial related discipline. Qualification in ECF-ORM (Professional Level) is preferred.
Minimum 12–15 years’ practical experience in operational risk, business continuity management, vendor or third party management or related work, including people leadership.
Knowledge of operational risk management and a good understanding of banking operations and processes.
Self-motivated, with strong analytical and problem-solving skills, and results-oriented.
Team-work oriented, with a proactive manner.
Proficient in written and spoken English and Chinese, and in MS Office applications. Fluency in Putonghua is an advantage.