Head of Technology and Operational Risk

Kerry Consulting; Kuala Lumpur; On-site; MYR 350,000 - 650,000; Full time

Job summary

Kerry Consulting is seeking a Senior Technology and Operational Risk leader for a high-visibility, regional role. You will oversee technology risk, operational resilience, and regulatory alignment across multiple markets, partnering with senior stakeholders to strengthen risk governance.

With 15+ years in financial services risk, you will build and lead a high-performing team, drive independent challenge, and report on emerging themes to executive committees.

Qualifications

• 15+ years of experience in technology/operational risk within financial services.
• Strong understanding of cybersecurity, cloud, data and emerging tech risks.
• Experience overseeing risk within a complex financial institution.
• Experience operating regionally or globally and engaging senior stakeholders.
• Strong regulatory knowledge related to technology and resilience.
• Ability to provide credible challenge to senior technology, operations and business leaders while remaining pragmatic.
• Proven leadership in building high-performing risk teams.
• Excellent communication with executive stakeholders.

Responsibilities

• Lead the Technology & Operational Risk function, covering technology risk and operational resilience.
• Provide independent risk oversight across major tech initiatives, cloud adoption, cybersecurity and emerging tech.
• Establish and enhance risk frameworks, policies, standards and governance.
• Oversee identification and assessment of key risks, control effectiveness and remediation.
• Strengthen operational resilience, including critical services, testing and business continuity.
• Provide risk oversight of incidents and control failures with root-cause analysis.
• Assess risks from AI, automation, cloud and data with governance and controls.
• Oversee third-party/ supplier risk including outsourcing and concentration risks.
• Report to senior management and governance committees on key risks and themes.
• Engage regulators and ensure alignment with regulatory expectations.
• Partner with first-line tech/ops/business stakeholders while maintaining independent oversight.
• Lead, develop and mentor a team of risk professionals.

Skills

Leadership

Risk management

Regulatory knowledge

Stakeholder management

Executive communication

Job description

This is a senior leadership appointment with broad regional/global exposure, responsible for strengthening the organisation's risk management capabilities across an increasingly complex technology and operational environment. The role will lead a team of professionals and partner closely with senior stakeholders across Technology, Operations, Cybersecurity, Business, Risk and Compliance.

Key Responsibilities:

• Lead the Technology & Operational Risk function, covering technology risk, operational risk and operational resilience.
• Provide independent risk oversight and challenge across major technology initiatives, digital transformation, cloud adoption, cybersecurity and emerging technologies.
• Establish and continuously enhance technology and operational risk frameworks, policies, standards and governance.
• Oversee identification and assessment of key technology and operational risks, control effectiveness, risk acceptance and remediation.
• Strengthen operational resilience, including critical business services, scenario testing, business continuity, disaster recovery and third-party dependencies.
• Provide risk oversight of technology incidents, operational events and control failures, ensuring appropriate root‑cause analysis and remediation.
• Assess risks arising from AI, automation, cloud, data and other emerging technologies, working with relevant specialists to establish appropriate governance and controls.
• Oversee third‑party and technology supplier risk, including critical outsourcing and concentration risks.
• Provide senior management and relevant governance committees with clear reporting on key risks, emerging themes and areas requiring attention.
• Maintain effective engagement with relevant regulators and ensure alignment with applicable regulatory expectations.
• Partner with first‑line Technology, Operations and Business stakeholders while maintaining effective independent oversight and challenge.
• Lead, develop and mentor a team of technology and operational risk professionals.

Requirements:

• More than 15 years of experience within technology risk, operational risk, operational resilience or non‑financial risk within financial services.
• Strong technology risk foundation, with a good understanding of areas such as cybersecurity, cloud, infrastructure, applications, data, third‑party technology and emerging technology risks.
• Demonstrated experience overseeing operational risk and/or operational resilience within a complex financial institution.
• Experience operating within a regional or global organisation and engaging senior stakeholders across multiple markets.
• Strong understanding of financial services regulatory expectations relating to technology, operational risk and resilience.
• Ability to provide credible challenge to senior Technology, Operations and Business leaders while remaining commercially pragmatic.
• Strong leadership experience with a track record of building and developing high‑performing risk teams.
• Excellent communication and executive stakeholder management skills.