Senior Manager, Operational Risk Management, Risk

We are seeking a highly motivated and experienced professional to join our Risk team as a Senior Manager, Operational Risk Management. This role plays a key part in identifying, assessing, managing, and reporting operational and technology risks across the organisation.

Key Responsibilities:

• Identify operational loss events through data analysis and escalate significant issues within the Operational Risk Management (ORM) team and to the Chief Risk Officer.
• Support Business Continuity Planning, Disaster Recovery, and Crisis Management activities.
• Assist in preparing Key Risk Indicator reports using diverse business and technology data sources.
• Support the annual organisational risk and control self-assessment programme, including identifying risks, controls, and test cases, implementing action plans, and reporting progress.
• Investigate significant operational and technology risk events with potential financial, reputational, or regulatory implications.
• Manage the policy exceptions approval and renewal process.
• Coordinate technology risk assessments and engage with key IT stakeholders.
• Track mitigation plans and ensure closure of action items related to key risks and controls.
• Support reporting activities and liaise with external Operational Risk Management teams.
• Advise business units on operational and technology risk matters as a second line of defence.
• Oversee governance of End User Computing tools across the group.

As the role progresses, the candidate will have opportunities to:

• Review and enhance control frameworks for new products and projects.
• Update and train staff on ORM and Technology Risk Management (TRM) policies.
• Implement ORM and TRM frameworks in new departments or regional offices.
• Represent ORM and TRM in governance meetings and working groups.

Requirements:

• Minimum 5 years’ experience in Operational Risk, with at least 2–3 years in Technology Risk Assessment or control testing.
• Background in Operational/Technology Risk consulting or financial services preferred.
• Professional certifications such as CISA or CRISC are advantageous but not mandatory.
• Excellent interpersonal and stakeholder management skills, with the ability to communicate effectively at all levels.
• Strong project planning, diligence, and a detail-oriented approach.
• Fluent in written and spoken English; proficiency in written Chinese and spoken Mandarin is preferred.
• Master’s degree in Finance, Business, or a related discipline is required.
• Advanced skills in Excel, Macros, SQL, and Python will be a definite advantage.

Location: Hong Kong