Manager, Technology and Operational Risk Management

Role Purpose:

To support the implementation of the Bank’s Internal Control Enhancement and relevant Technology and Operational Risk Management related initiatives, with particular focus on ensuring that enhanced processes and controls are sustainable once implemented.

Key Responsibilities:

• Support the implementation of the Bank’s Internal Control Enhancement and relevant Technology and Operational Risk Management related initiatives, with particular focus on ensuring that enhanced processes and controls are sustainable once implemented.
• Develop and execute risk-based examination plans to assess the design and operating effectiveness of key operational and technology controls through appropriate testing procedures.
• Support the continuous refinement of Risk and Control Self-Assessments and conduct regular examinations to verify whether key controls remain relevant, are clearly defined, operate as intended and are supported by sufficient evidence.
• Review key processes such as Product Governance and System Development Life Cycle.
• Review operational and technology incidents to identify actual or potential control failures, assess root causes and immediate containment measures, and determine whether similar weaknesses may exist in other processes or systems.
• Advise on corrective and preventive actions, monitor remediation progress, validate the implementation and effectiveness of material remediation actions, and escalate overdue or ineffective actions to the appropriate governance forum.
• Drive the automation of selected risk management processes, to reduce manual effort and improve data quality.
• Support regulatory examinations, thematic reviews, policy and methodology enhancements, committee reporting and other ad hoc Operational Risk or Technology Risk assignments as required.
• Provide training and guidance to promote staff awareness of operational risk management, effective control execution and a sound internal control culture across the Bank.

Skills & Qualifications:

• Bachelor's degree, preferred in risk management, business, finance, information technology, accounting or a relevant discipline.
• At least 5 years’ relevant experience in operational risk management, technology risk, internal control, audit, compliance testing, or a related discipline, preferably gained in financial institutions or audit firms.
• Practical experience in control design assessment and operating effectiveness testing, including sampling, evidence review, documentation of findings and remediation validation.
• Good understanding of Product Governance, RCSA, incident management and root-cause analysis; familiarity with quality standards and best practices for user requirements, system specifications, testing, and production deployment processes.
• Good command of both spoken and written English and Chinese, including Putonghua.
• Proficient in Microsoft Office; knowledge of management dashboard data visualization, workflow automation or related tools.
• Strong analytical, critical-thinking and problem-solving skills, with curiosity and attention to detail.
• Good judgement, ability to work independently and capability to handle multiple tasks and projects concurrently under pressure.
• Strong interpersonal and communication skills, with the confidence to provide constructive challenges to business and technology stakeholders.
• Proactive, well-organized and committed to producing high-quality, evidence-based work.