Business Analyst - Third-Party & Operational Risk

Morgan Mckinley Limited; Hong Kong; On-site; HKD 520,000 - 680,000; Full time

Job summary

Morgan Mckinley Limited is seeking a Business Analyst with a focus on Third-Party Risk Management to support 2nd-line risk controls and system governance across business units in Hong Kong.

The role covers BAU risk operations, project and system enhancements, budget tracking, and the creation of end-user guidance and training to drive adoption and best practices. A 4–5 year background in finance, risk, or consulting is preferred, with Power BI and Excel proficiency.

Qualifications

• Experience: 4-5 years in Business Analysis, Operational/Third-Party Risk, Consulting, or Financial Oversight.
• Power BI proficiency for reporting and dashboarding.
• Strong working knowledge of Excel (Pivot Tables, VLOOKUP, data manipulation).
• Financial acumen with budgeting/tracking project or department budgets.
• Domain knowledge of Third-Party Risk Management (TPRM), Vendor Risk, or Non-Financial Resilience Risk.
• Education: Degree in Finance, Risk Management, Business, or related discipline. CFA or risk-related certifications an advantage.
• Personal attributes: Proactive, adaptable, execution-minded, and strong communicator.

Responsibilities

• Act as a key point of contact for 2nd-line TPRM system support and embed risk control frameworks across business units.
• Oversee day-to-day Third-Party Risk Management and Non-Financial Resilience Risk activities ensuring compliance with standards.
• Monitor project scope, milestones, and deliverables for TPRM system upgrades and feature rollouts.
• Assist in preparing and tracking the annual TPRM budget, monitoring variances and project-level financials.
• Develop guidance notes, documentation, and training materials to drive system adoption and best practices.

Job description

Business Analyst - Third-Party & Operational Risk

System Support & Governance: Act as a key point of contact for 2nd-line TPRM system support, helping embed robust risk control frameworks across business units.

BAU & Risk Operations: Oversee day-to-day Third-Party Risk Management and Non-Financial Resilience Risk activities, ensuring compliance with organizational standards.

Project & System Enhancements: Monitor project scope, milestones, and deliverables for ongoing TPRM system upgrades and feature rollouts.

Budget & Financial Oversight: Assist in preparing and tracking the annual TPRM budget, monitoring variances, and managing project-level financial tracking.

Enablement & Training: Develop practical guidance notes, documentation, and training materials for end-users to drive system adoption and best practices.

Key Requirements

Experience: Minimum 4-5 years of relevant experience in Business Analysis, Operational/Third-Party Risk, Consulting, or Financial Oversight. (Banking, Insurance, or Consulting backgrounds are strongly preferred).

Technical Skills:

Proficiency in Power BI for reporting and dashboarding.

Strong working knowledge of Excel (Pivot Tables, VLOOKUP, data manipulation).

Financial Acumen: Basic accounting/budgeting background with hands‑on experience tracking project or departmental budgets.

Domain Knowledge: Solid conceptual understanding of Third-Party Risk Management (TPRM), Vendor Risk, or Non-Financial Resilience Risk.

Education & Credentials: Degree in Finance, Risk Management, Business, or related discipline. CFA or risk-related certifications are an advantage.

Personal Attributes

Proactive & Adaptable: High energy, quick learner, and flexible enough to pivot in a fast-moving environment.

Execution-Minded: Comfortable working in a lean structure

Strong Communication: Able to translate risk concepts into clear guidance notes and training for cross-functional stakeholders.