Assistant Risk and Control Manager - CCO
Brand: HSBC
Area of Interest: Operations
Location: Kuala Lumpur, Federal Territory of Kuala Lumpur, MY, 55188
Work style: Hybrid Worker
Date: 28 Jan 2026
Some careers grow faster than others.
If you’re looking for a career that will give you plenty of opportunities to develop, join HSBC and your future will be rich with potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.
HSBC Digital Business Services is a pivotal part of the Group, providing essential operational and technical support to our global businesses and helping improve customer service and efficiency. Digital Business Services combines global expertise and technology to help keep us ahead of the competition.
We are currently seeking an experienced professional to join our team in the role of Assistant Risk and Control Manager - CCO.
Role Purpose
A key emerging function supporting Wealth and Personal Banking (WPB) and Digital Business Services, the DBS Control Office is to ensure HBMY WPB and DBS is proactively managing current and emerging risk exposures, that risks and issues have been identified, assessed and are being managed via appropriate internal controls in line with risk appetite and any regulatory and Group Standards & Policy requirements.
Supporting the DBS Chief Control Officer, the jobholder will be responsible for establishing and managing the overall risk and control framework of HBMY WPB and DBS: providing independent oversight, challenging, and advising management, and ensuring the effectiveness and robustness of the HBMY risk and control framework.
- Identification of risk and controls, oversight of controls and reporting on any related operational losses.
- Implementing and managing the risk and control framework within HBMY Wealth & Personal Banking (WPB) and Digital Business Services (DBS).
- Maintain HSBC internal control standards and work with internal and external stakeholders to ensure the timely implementation of internal and external audit recommendations and/or any issues raised by external regulator.
- Arrange for reviews across HBMY Wealth & Personal Banking (WPB) and Digital Business Services (DBS) on internal control capabilities.
- Highlight issues and to provide the business/network with ongoing feedback on business risk issues uncovered and make recommendations for rectification.
- Preparing and completing relevant management reports on the review of the risk and internal control capabilities.
- Ensure business operation follows internal and regulatory requirements.
- Liaising with First Line of Defense (LoD), Second LoD, Risk Owner and Control Owner on activities related to the Risk and Control Management process.
- Supporting the incident management processes such as recording, reporting, investigation, and escalation.
- Understand, follow up and demonstrate compliance with all relevant internal and external rules, regulations and procedures that apply to the conduct of HBMY Wealth & Personal Banking (WPB) and Digital Business Services (DBS) in which Control Office is involved.
- To educate and train HBMY Wealth & Personal Banking (WPB) and Digital Business Services (DBS) staffs on the importance of audit and requirements.
- To conduct regular briefings and/or branch/network intervention training to inculcate high compliance awareness and business risk controls.
- To share best practices and enhance the control framework and minimize findings noted in Audit Reviews and Thematic Reviews.
- Liaison between the regional/group office on key controls and compliance fulfilments of internal and external policies.
- Proactively taking measures to continuously support HBMY Wealth & Personal Banking (WPB) and Digital Business Services (DBS) in achieving targets whilst maintaining satisfactory compliance culture.
- Supporting projects and initiatives related to improving business risks and control management within the business.
- Close communication with all HBMY stakeholders to achieve the overall HBMY Wealth & Personal Banking (WPB) and Digital Business Services (DBS) objectives.
- Adding value by applying operational experiences to formulate action plans that are practical and ease of implementation for the network for effective business risks control.
- Conduct thematic review on high-risk areas and ensure remedial actions are followed up followed through accordingly.
Requirements:
- Must have a bachelor’s degree preferably a degree in Finance, business or in related fields. Between 3 to 5 years work experience preferably in risk and control management.
- Good understanding and knowledge of operational risks and internal control standards and best practices in operational risk management.
- Knowledge of the audit management and facilitation process and experience in managing audit deliverables.
- Strong communication and interpersonal skills to a wide range of individuals and groups and at different levels of seniority.
- Self-starter with attention to details combined with strong delivery focus and ability to meet aggressive timeframes with quality results.
- Ability to work in a pressurised environment and manage continually changing priorities effectively.
- Project management skill will be an added advantage.
- Good Data analytical skills with the ability to consider/recommend alternative and lateral solutions and streamline processes.
- Sound knowledge of the HBMY Wealth and Personal Banking and Digital Business Services including products & services.
Due to the urgent hiring need, candidates with immediate right to work locally and no relocation needed will be prioritized.
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.