Operational Risk Manager

ZA Bank Limited; Hong Kong; On-site; HKD 700,000 - 1,000,000; Full time

Job summary

ZA Bank Limited is seeking an Experienced Operational Risk Manager to lead and enhance the bank's ORM and resilience framework. The role focuses on strengthening control effectiveness, RCSA/KRI processes, incident analysis, and risk advisory for new products.

You will drive data-driven risk insights and support BCM initiatives, reporting to senior management. The successful candidate will have a minimum of 5 years in financial services, familiarity with HKMA frameworks, and strong communication

Qualifications

• Bachelor's degree in Information Technology, Finance, Risk Management or related discipline.
• Minimum 5 years of relevant experience in financial sector or consultancy focusing on operational risk management.
• Professional certifications such as AORP or CORP are a plus.
• Practical knowledge of risk management frameworks and methodologies.
• Familiarity with HKMA OR-1, OR-2, TM-G-2, IC-1, SA-2.

Responsibilities

• Develop, implement, and maintain the Bank's ORM framework and operational resilience framework.
• Assess effectiveness of controls and provide enhancement recommendations aligned with HKMA expectations.
• Drive RCSA and KRI processes, strengthening risk identification and monitoring.
• Review operational risk events, perform root cause analysis, and define mitigations.
• Provide risk advisory for new products and services and conduct thematic process reviews.
• Analyze risk data and maintain high-quality operational loss data for insights.
• Track risk issues and remediation plans to ensure timely closure.
• Support BCM and resilience initiatives including BIA, BCP drills, and testing.
• Coordinate NPC activities and ensure proper governance and archival records.
• Prepare monthly and ad hoc operational risk reports for senior management.
• Promote risk awareness and training across business units.
• Contribute to outsourcing and third-party risk management and HKMA initiatives.

Skills

Operational risk mgmt

Regulatory compliance

HKMA frameworks

Risk assessment

Data analysis

Communication skills

Multilingual English/Putonghua

Education

Bachelor's degree

Job description

Develop, implement, and maintain the Bank's Operational Risk Management (ORM) framework and operational resilience framework, including supporting policies, procedures, systems, and tools

Assess the effectiveness of existing controls and provide recommendations for enhancement in alignment with HKMA Supervisory Policy Manual and regulatory expectations

Drive and coordinate Risk and Control Self-Assessment (RCSA) and Key Risk Indicator (KRI) processes, strengthening risk identification, assessment methodologies, and monitoring practices

Manage the review and analysis of operational risk events, incident trends, and significant incidents, including root cause analysis and implementation of effective mitigation measures

Conduct thematic reviews of operational processes, provide input into product due diligence, and deliver risk advisory support for new products and services

Perform risk data analysis and maintain high-quality operational loss data to support risk insights, trend analysis, and data-driven decision-making

Track and monitor risk issues and action plans, ensuring timely remediation and closure of identified gaps

Support Business Continuity Management (BCM) and operational resilience initiatives, including BIA, maintenance of critical operations, BCP drills and scenario testing

Oversee the coordination and governance of New Product Committee (NPC) activities, including organizing meetings, maintaining centralized records of product/service approvals, tracking completion of the review, and ensuring documentation is properly archived for audit and independent review

Prepare timely and accurate monthly and ad hoc operational risk reports for senior management and Risk Committees

Promote risk awareness and provide training to business units to strengthen risk culture and ensure continuous improvement of operational risk management practices

Contribute to outsourcing and third-party risk management as well as regulatory initiatives (e.g., ICAAP, HKMA reporting)

Requirement:

Bachelor's degree, preferably in Information Technology, Finance, Risk Management, or a related discipline.

A minimum of 5 years of relevant experience in the financial sector or consultancy, focusing on operational risk management. Having an Associated Operational Risk Management Professional (AORP) or Certified Operational Risk Management Professional (CORP) certification is an advantage.

Practical experience and knowledge of risk management frameworks and methodologies.

Familiarity with control frameworks such as OR-1, OR-2, TM-G-2, IC-1, SA-2 published by the HKMA.

Strong understanding of risk assessment methodologies, industry best practices, and emerging trends in risk management.

Excellent analytical, problem-solving, and decision-making skills.

Exceptional communication, presentation, and interpersonal skills.

Ability to work independently and manage multiple tasks effectively.

Good command of spoken and written English and Chinese (including Putonghua).

Mandatory Reference Checking Scheme

Mandatory Reference Checking Scheme (MRC Scheme) may be applicable for certain relevant positions. It is a standardised reference-checking arrangement that is designed to support the integrity of "authorized institutions" regulated by the Hong Kong Monetary Authority (HKMA). Pursuant to the MRC scheme, our Bank will conduct a mandatory reference check by requesting information from each relevant former and current employer of applicants. For more details about the MRC Scheme, please visit the website of the Hong Kong Association of Banks: https://www.hkab.org.hk/en/page/5/mandatory-reference-checking-scheme-phase-2

Applicants who are not invited for an interview within the 8 weeks after submission of application may assume their applications are unsuccessful. We may review applications received for suitability for other posts within the Company. All personal data provided will be treated in strict confidence and used strictly for recruitment-related purposes only. We shall retain the personal data of unsuccessful applicants for a period of 24 months upon receipt of such application.

ZA Bank, licensed by the HKMA in 2019, is Hong Kong's first and largest digital bank. With 800,000 users as of 30 June 2024, it leads the city's digital banking sector in customer base and deposits. ZA Bank's "Community-Driven" approach actively involves users in product development, resulting in tailored financial services for individuals, SMEs, and Web3 enterprises. The bank offers a comprehensive range of services including banking, investment, insurance, and business solutions. ZA Bank continues to innovate in Hong Kong's financial landscape. It operates as a subsidiary of ZA Global, established in 2017, to explore global fintech and insurtech opportunities.

ZA Bank, licensed by the HKMA in 2019, is Hong Kong's first and largest digital bank. With 800,000 users as of 30 June 2024, it leads the city's digital banking sector in customer base and deposits. ZA Bank's "Community-Driven" approach actively involves users in product development, resulting in tailored financial services for individuals, SMEs, and Web3 enterprises. The bank offers a comprehensive range of services including banking, investment, insurance, and business solutions. ZA Bank continues to innovate in Hong Kong's financial landscape. It operates as a subsidiary of ZA Global, established in 2017, to explore global fintech and insurtech opportunities.

Your application will include the following questions:

• Which of the following statements best describes your right to work in Hong Kong?
• What's your expected monthly basic salary?

What can I earn as an Operational Risk Manager