VP, Operational Risk Management, ICORM (Legal & Compliance Department)

CMB Wing Lung Bank Limited; Hong Kong; On-site; HKD 1,200,000 - 2,000,000; Full time

Job summary

CMB Wing Lung Bank Limited in Hong Kong seeks a VP to own and oversee operational risk management across the bank. You will manage KRIs and ROCS, incident handling, and the operational loss database to ensure accuracy and audit readiness.

You will align with HKMA OR-1/OR-2, TM-G-2 and SA-2, review policies, and lead enterprise BCM, resilience, and vendor due diligence. Strong leadership and bilingual communication are required.

Qualifications

• Degree in Business/Finance or related discipline.
• ECF-ORM (Professional Level) is preferred.
• Minimum 12-15 years’ practical experience in operational risk, business continuity management, vendor or third party management or related work, including people leadership.

Responsibilities

• Own and oversee operational risk tools and systems, including KRIs and ROCS; ensure consistent application across departments.
• Own incident and operational risk event management from intake through root-cause and remedial action tracking; maintain audit trail.
• Maintain the operational risk database with completeness, accuracy, recoveries and audit trail; ensure regulatory reporting readiness.
• Align operational risk framework with HKMA SPM OR-1, OR-2, TM-G-2 and SA-2, and with head office standards; review policies and procedures.
• Direct bank-wide business continuity management and resilience, map critical operations and resources, assess drills and tests.
• Endorse or challenge product due diligence on new/changes to outsourcing and third-party arrangements from an operational risk perspective.

Skills

Operational risk management

Business continuity management

Vendor/third party management

Regulatory reporting

Education

Degree in Business/Finance or related discipline

ECF-ORM (Professional Level) preferred

Job description

VP, Operational Risk Management, ICORM (Legal & Compliance Department)

Own and oversee operational risk tools and systems, including key risk indicators and risk and control self-assessment. Keep the tools consistently applied across departments.

Own incident and operational risk event management from intake through root-cause and remedial action tracking. Oversee and maintain the operational loss database, including completeness, accuracy, recoveries and audit trail.

Keep the operational risk framework aligned with HKMA SPM OR-1, OR-2, TM-G-2 and SA-2, and with head office standards. Review and maintain the operational risk management policies and procedures, and comment on Bank workflows from an operational risk perspective.

Direct bank-wide business continuity management and the consolidation of BCP practices with operational resilience under OR-2. Oversee mapping of critical operations and important business services, including key resources, interconnections and tolerances for disruption. Assess departmental plans, drills and resilience scenario tests, and require departments to adjust arrangements after evaluation.

Endorse or independently challenge product due diligence on new products and changes to existing products, and pre-contract and renewal due diligence on outsourcing, vendor and third party arrangements, from an operational risk and resilience perspective.

Oversee operational risk stress testing to estimate operational losses under stressed scenarios, and supply the results and loss data needed for the Bank’s operational risk capital work under HKMA requirements.

Oversee operational risk training, the issue of risk alerts, and communication of warnings from regulatory and enforcement agencies.

Oversee operational risk management reports to regulatory authorities, e.g. the annual statement on business continuity and the independent compliance assessment on business continuity planning, and monthly, quarterly and ad hoc reports to head office, senior management and committees.

Requirements:

Degree holder in Business, Finance or another financial related discipline. Qualification in ECF-ORM (Professional Level) is preferred.

Minimum 12-15 years’ practical experience in operational risk, business continuity management, vendor or third party management or related work, including people leadership.

Knowledge of operational risk management and a good understanding of banking operations and processes.

Self-motivated, with strong analytical and problem-solving skills, and results-oriented.

Team-work oriented, with a proactive manner.

Proficient in written and spoken English and Chinese, and in MS Office applications. Fluency in Putonghua is an advantage.