Third Party Risk and Cloud Governance Manager

Third Party Risk and Cloud Governance ManagerThird Party Risk and Cloud Governance ManagerTechnology; Hong Kong; On-site; HKD 1,000,000 - 1,500,000; Full time

Job summary

Mox Bank is seeking a Senior Third Party Risk Manager/Lead to govern third party and supply chain risks arising from technology, cyber and operations. You will report to the Head of Digital Risk and Resilience and drive the risk program across multiple stakeholders, vendors and cloud providers to maintain resilience and risk alignment.

This permanent, full-time role in Hong Kong requires 5+ years in technology or resiliency risk, strong governance and cloud risk experience, and the ability to

Qualifications

• 5+ years in Technology, supply chain or resiliency Risk management or related positions.

Responsibilities

• Manage one of Mox’s most important integrated risk types across cyber, technology, operational and compliance risks.
• Govern third party risk program, ensuring alignment with risk framework and appetite.
• Collaborate with technology, business and risk lines to track, address and monitor supply chain risks.
• Oversee vendor onboarding, due diligence and cloud risk assessments.
• Ensure compliance withCloud Governance Framework and Third Party Risk Management policies.
• Develop and maintain risk control monitoring plans and perform evidence-based assessments.

Job description

Third Party Risk and Cloud Governance Manager

Mox is built by and for the ones who aspire to live life to the fullest – we call them Generation Mox! The name Mox reflects the endless opportunities we can create, - Mobile e Xperience; Money e Xperience; Money X (multiplier), e Xponential growth, e Xploration… it’s all up for us to define together.

Location: Hong Kong (SAR)

Contract: Permanent - Full Time

Department: Technology - CDSIO

We are looking for a Senior Third Party Risk Manager/Lead to manage one of Mox’s most important integrated risk types and will be responsible for manage third party risks as an aggregate of cyber, technology, operational and compliance risks arising from our use of technology.

Who are we looking for?

Reporting to the Head of Digital Risk and Resilience, this role is responsible for the broad program of managing third party and supply chain risks which impact the bank, the governance of said risk, and for ensuring areas of intersection with other risk types are properly identified and managed. Mox Bank is built on world-class technology service providers and this role plays a critical role in managing these cross-domain supply chain risk, promoting resilience and delivering world class services to our customer.

• Drive the execution of the Third Party Risk function by collaborating across the 2 lines of defence and with contract owners within a fast-paced technology banking environment in order to
• Engage and collaborate with technology, business, and all lines of defence to ensure that supply chain risk items are appropriately tracked, addressed and maintained in line with the risk management framework and risk appetite.
• Review, track and report on vendor and cloud risk assessments to mitigate supply chain risks to the bank.
• Work close with various contract owners and risk stakeholders to facilitate vendor onboarding and oversee the required due diligence risk assessments.
• Ensure compliance with the Cloud Governance Framework and Third Party Risk Management policies and integrate these cross-disciplinary activities into the broader risk management practices within the Bank.
• Develop and maintain third party risk and control monitoring plans, performing monitoring activities and analysis of evidence to determine controls design and operational effectiveness.
• Cross-skill and work closely with other Risk personnel to wholistically manage overlapping duties or responsibilities such as risk assessments, governance reporting and management of cloud-based risks associated with new Mox solutions.
• Be an agent of change by making risk management relevant to everyone in a clear and succinct manner as we seek to further embed a risk control culture. This may include training delivery and participation in awareness campaigns.
• Be open to change over time as we in turn adopt our strategy to meet ever-changing control and regulatory landscape.

5+ years in Technology, supply chain or resiliency Risk management or supply chain risk related positions, including time spent in Risk, Governance, Audit, Technology Risk, Cybersecurity. Ideally, your experience will include time in a consulting or advisory capacity.

We will consider a candidate with more experience in the Lead position.

You should be able to demonstrate:

• Excellent communication skills and the ability to martial human capital to achieve risk objectives.
• Deep understanding of technology risks, especially cloud operations and third party risks.
• Experience in Cyber governance, risk management, operational risk or supply chain risk
• Possess strong interpersonal and communication skills and display initiative to lead discussions with operational staff at all levels, business leaders and colleagues
• Excellent written and verbal communication skills, proactive, interpersonal, and collaborative skills, and the ability to communicate technology risk concepts to technical and nontechnical audiences at various hierarchical
• Strong control mindset and is confident to be the go-to person on 3rd party, technology and resiliency risk matters
• Able to provide effective challenge and recommendations whilst building strong, respectful relationships across different functions
• Ability to lead and motivate the first line risk and technology teams to achieve tactical and strategic goals.
• Thrive in a fast paced, multi-cultural environment where the day to day job varies and lines of responsibility are fluid