Responsibilities:

1. Risk Governance and Framework Oversight on Southeast Asian (SEA) entities:

1.1 Operational risk:

• Oversee and provide guidance on the implementation of operational risk frameworks across SEA entities, including operational resilience (HKMA OR-2), risk control self-assessments (RACAs), key risk indicators (KRIs), loss event databases, business continuity planning (BCP), third-party / outsourcing risk management, and product due diligence processes.
• Identify emerging operational risk and ensure mitigation strategies across SEA entities align with regional requirements, Parent Bank's policies, Basel III standards, and regulatory expectations.

1.2 Legal, Compliance and Reputation risk:

• Oversee and refine the SEA entities' framework for adherence to local laws and regulations, provide guidance to and review SEA entities' compliance programs.
• Monitor regulatory developments, assess impacts on operations, and supervise corrective measures to address gaps.
• Provide advice regarding business compliance and/ or related risk management on SEA business. Conduct thematic and onsite reviews on relevant risk matters.
• Escalate critical issues promptly to ensure timely resolution and transparency.

2. Group Standards Alignment and Risk Reporting

• Drive adoption of group risk policies (legal, regulatory compliance, operational, reputation risk) across SEA entities, ensure alignment of local practices with regional and Parent Bank's standards.
• Evaluate and provide advice on SEA entities' relevant risk reporting, remediation and work plan to ensure accuracy and accountability.
• Consolidate and analyze regional risk data into executive-level reports for the regional executive team and Parent Bank, highlighting compliance gaps, emerging risks and vulnerability, progress on remediation and alignment with group standards.

3. Stakeholder management

• Partner with country-level compliance / relevant risk teams across SEA entities, fostering a culture of risk ownership for continuous improvement.
• Collaborate with cross-functional teams to embed risk awareness into strategic initiatives and business operations.
• Oversee responses to high-impact audits, regulatory inquiries and inspections, ensuring root-cause analysis, sustainable remediation and head office visibility. Participate in communication with regulators in SEA countries.
• Participate in regional meetings and various projects to address cross-border challenges in relevant risks areas.

Requirements:

• Bachelor degree holder or above, preferably with risk management or regulatory compliance background
• 4 years of working experience in financial institutions is preferred, preferably in the management of operational risk and/ or regulatory compliance, with regional exposures a plus
• Has good experience in implementing operational risk frameworks
• Has sound understanding of the various lines of business in a commercial bank
• Proficiency in both English and Chinese with good communication skills

If you are applying for in-scope position(s) under the Mandatory Reference Checking Scheme (i.e., A role carrying out regulated activities licensed by the IA, SFC & MPFA), you are required to undergo the Mandatory Reference Checking. Our responsible recruiter will inform you the details of the MRC process and the requirements in due course. For details, please click here .