Head of Technology and Operational Risk

Kerry Consulting; Kampung Malaysia Tambahan; On-site; MYR 800,000 - 1,200,000; Full time

Job summary

Kerry Consulting is seeking a senior leader to strengthen risk management across technology and operations in a global context. You will lead a team of professionals and partner with senior stakeholders across Technology, Operations, Cybersecurity, Business, Risk and Compliance.

You will establish risk frameworks, oversee identification and remediation of key risks, and provide governance reporting while engaging with regulators and first-line stakeholders.

Qualifications

• 15+ years of experience in technology risk, operational risk, operational resilience or non-financial risk within financial services.
• Strong understanding of cybersecurity, cloud, data, infrastructure and emerging technology risks.
• Proven ability to lead risk teams and provide credible challenge to senior leadership at regional/global scale.

Responsibilities

• Lead the Technology & Operational Risk function, covering technology risk, operational risk and operational resilience.
• Provide independent risk oversight across major technology initiatives, digital transformation and cybersecurity.
• Establish and enhance risk framework, policies, standards and governance.
• Oversee risk identification, assessment, control effectiveness, remediation and reporting to executives.

Skills

Technology risk

Operational risk

Operational resilience

Leadership

Stakeholder management

Regulatory expectations

Risk governance

Executive communication

Third-party risk

Job description

This is a senior leadership appointment with broad regional/global exposure, responsible for strengthening the organisation's risk management capabilities across an increasingly complex technology and operational environment. The role will lead a team of professionals and partner closely with senior stakeholders across Technology, Operations, Cybersecurity, Business, Risk and Compliance.

Key Responsibilities:

• Lead the Technology & Operational Risk function, covering technology risk, operational risk and operational resilience.
• Provide independent risk oversight and challenge across major technology initiatives, digital transformation, cloud adoption, cybersecurity and emerging technologies.
• Establish and continuously enhance technology and operational risk frameworks, policies, standards and governance.
• Oversee identification and assessment of key technology and operational risks, control effectiveness, risk acceptance and remediation.
• Strengthen operational resilience, including critical business services, scenario testing, business continuity, disaster recovery and third-party dependencies.
• Provide risk oversight of technology incidents, operational events and control failures, ensuring appropriate root-cause analysis and remediation.
• Assess risks arising from AI, automation, cloud, data and other emerging technologies, working with relevant specialists to establish appropriate governance and controls.
• Oversee third-party and technology supplier risk, including critical outsourcing and concentration risks.
• Provide senior management and relevant governance committees with clear reporting on key risks, emerging themes and areas requiring attention.
• Maintain effective engagement with relevant regulators and ensure alignment with applicable regulatory expectations.
• Partner with first-line Technology, Operations and Business stakeholders while maintaining effective independent oversight and challenge.
• Lead, develop and mentor a team of technology and operational risk professionals.

Requirements:

• More than 15 years of experience within technology risk, operational risk, operational resilience or non-financial risk within financial services.
• Strong technology risk foundation, with a good understanding of areas such as cybersecurity, cloud, infrastructure, applications, data, third-party technology and emerging technology risks.
• Demonstrated experience overseeing operational risk and/or operational resilience within a complex financial institution.
• Experience operating within a regional or global organisation and engaging senior stakeholders across multiple markets.
• Strong understanding of financial services regulatory expectations relating to technology, operational risk and resilience.
• Ability to provide credible challenge to senior Technology, Operations and Business leaders while remaining commercially pragmatic.
• Strong leadership experience with a track record of building and developing high-performing risk teams.
• Excellent communication and executive stakeholder management skills.