Manager, Operational Risk

The staff is responsible for supporting the Risk Management Team to fully implement an effective Enterprise Risk Management framework in the company. This role has a primary focus on Operational Risk Management.

What the role is? Support the Associate Director, Risk Management in managing and implementing the Enterprise Risk Management Framework, with a primary focus on ensuring the effective operation of the Company’s operational risk management practices. Key roles and responsibilities are set out below.

Risk Committee and Management Reporting

• Provide key support in preparing regular reports on operational risk management activities for relevant management committees and the Board-level Risk Committee, and follow up and monitor actions arising from meetings.
• Monitor and report key risk indicators and ensure timely escalation of significant risk issues to the relevant risk committees.
• Coordinate and participate in pre-meetings with risk owners for the quarterly risk register meetings.
• Support regular reporting to Group Risk

Key Operational Risk Exercise and Reporting

• Collaborate with various departments to embed operational risk management practices into business process and decision-making
• Internal Control Adequacy Assessment (InCA). Drive the annual InCA exercise, including scoping, training, testing and reporting result to management; identify enhancement opportunities for InCA process
• Risk and Control Self-Assessment (RCSA). Facilitate and support the quarterly RCSA exercise with risk and control owners
• Incident Reporting. Facilitate operational risk incident reporting; review incident reports and provide advice on remedial and preventive actions; monitor related actions and report updates to relevant risk committees; and enhance the existing incident reporting mechanism
• Project Risk Assessment. Facilitate and support project risk assessments, review assessment results, and provide advice on appropriate mitigating actions
• AI Risk Assessment/ Outsourcing Risk Assessment. Support the review from a risk management perspective
• Own Risk and Solvency Assessment (ORSA). Support the production of ORSA reporting from an operational risk perspective

Policy and Standard Adherence

• Support the regular review and validation of risk policies
• Support the review of the relevant Company’s policies and standards from a risk management perspective

Risk Awareness and Culture

• Foster and embed a strong risk culture in line with the Company’s risk philosophy.
• Support the delivery of training and awareness programmes to enhance understanding and management of operational risks across the Company

Others

• Act as a trusted advisor with all lines of defence.
• Support on other risk-related deliverables as warranted by the Chief Risk Officer or senior management team
• Demonstrate strong strategic acumen and proactively contribute valuable insights to support the continuous enhancement of the ERM framework.
• Support the enhancement of the GRC risk system.
• Provide advice on Business Continuity / Operational Resilience matters on needed basis

What we look for?

• Bachelor’s degree or above, preferably in Risk Management, Insurance, or Accountancy. Degree or above in other Business-related discipline may also be considered
• Professional qualifications in accountancy (e.g. HKICPA/ ACCA etc.) or risk management are preferred
• At least 8 to 10 years of working experience in operational risk management within the insurance industry or consultancy firm.
• Strong knowledge of operational risk management frameworks, tools, and techniques
• Excellent communication and stakeholder management skills. Influencing ability is an advantage
• Excellent analytical skills coupled with a pragmatic approach to problem solving
• Knowledge of regulatory requirements and industry best practices related to operational risk management
• Proficient in MS Office applications, particularly Excel and PowerPoint. AI tools (e.g. Copilot) and Power BI will be advantage
• Strong writing and presentation skills in both English and Chinese. Proficiency in Putonghua is preferred

Personal Information Collection Statement At Chow Tai Fook Life Insurance Company Limited (“the Company”) we respect the privacy of your personal data and are committed to fully complying with the Personal Data (Privacy) Ordinance (“the Ordinance”).

The personal data that we collect and/or hold (whether contained in this application form or otherwise obtained) includes your personal details, contact information, education and training details, employment details, financial details, and information on your social circumstances.

Provision of personal data by you is mandatory for selection purposes. Personal data collected through this application will be used by the Company to assess your suitability to assume the job duties of the position for which you have applied. The Company may not be able to process your application if you fail to provide your personal data.

Applicants not contacted within four weeks after the interview / test may consider their application unsuccessful. The information provided will be kept for 2 years for consideration of other suitable posts.