Responsibilities
• Measure, analyze, control, and recommend operational risk and business risk under the authority to be at the appropriate level in accordance with department policy.
• Provide operational risk and business risk report to the related management on updated risk profile.
• Develop operational risk and business risk management tools/systems and processes.
• Report potential impact to the management and the relevant units.
• Research in operational risk and business risk measurement and control framework.
• Prepare and educate operational risk and business risk management to related departments.
• Coordinate with related departments in utilizing tools/systems in operational risk and business risk management.
• Ensure that the key control standards are fully implemented at all levels and add to these as applicable.
• To ensure timely actions on all improvement actions
• Perform root cause analysis of the operational risk, errors and omission in the unit and build the controls to plug the mishaps.
• Participate and support risk initiatives including the Risk & Control Self-Assessment (RCSA), and the Key Risk Indicators (KRI) Program.
• Prepare and present all of the operational risk agenda to the Risk Committee.
• Participate in Business Continuity Plan (BCP) Test to find out the gaps of improvement.
• Participate in Call Tree Test and summarize the result of the test.
• Provide business partners with risk and control advice and guidance.
• Collaborate with concerned parties to make the proper configuration to the business and at the same time ensure that the risk is properly captured and monitored through the appropriate configuration.
• Liaison with SEC and other regulators to resolve problem caused.
• Analyze and evaluate the potential damage incurred from any breach of laws or regulations.
• To raise awareness on KYC/AML/ CFT/PEP
• Identify, assess, and evaluate IT risk to enable the execution of the IT risk management.
• Collect data, develop key risk indicators, analyze trends, identify areas for improvement or mitigation.
• Monitor IT risk and communicate information to the relevant stakeholders.
• Report of IT risk assessment and result, together with IT risk trend, IT Risk Monitoring to the management.
• Establish the Technology Risk Appetite Statement (RAS) and Risk Materiality Assessment (RMA)
• Create and update technology risk dashboard for senior management and relevant committees.
Qualifications
• Bachelor's degree or above with major in Engineer, Finance, Economics, Business Administration, IT, or related.
• At least 3-5 years’ experience in risk management, preferably in financial industry
• Knowledge of an Asset Management Company will be an advantage.
• Good analytical skills, interpersonal and communication skills with logical thinking.
• Proficiency in using Microsoft office.