Operational Resilience Lead

Prudential Hong Kong Limited; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Prudential Hong Kong Limited seeks an Operational Resilience Lead to drive the implementation, embedding, and continuous improvement of its resilience framework in line with Group policy and local governance.

The role provides leadership across critical business services, impact tolerances, dependency mapping, scenario testing, vulnerability management, self-assessment, reporting and incident learning to ensure resilience during severe but plausible disruptions.

Responsibilities

• Lead the implementation and ongoing enhancement of the Operational Resilience framework, standards, procedures, and methodologies.
• Coordinate governance approvals for critical business services, impact tolerances, resilience assessments, scenario testing outcomes, risk acceptances, and material remediation plans.
• Highlight operational resilience issues, vulnerabilities, and tolerance breaches to governance forums and coordinate escalation when required.
• Lead business stakeholders in completing criticality assessments against the service taxonomy and Group framework.
• Ensure each Critical Business Service has a Service Owner with clear accountability for resilience outcomes.
• Coordinate the validation, approval, and periodic review of the Critical Business Services list through COO or accountable executives.
• Support Service Owners in defining, validating, and maintaining appropriate impact tolerances with required approvals.
• Lead and maintain end-to-end dependency mapping for Critical Business Services across people, process, technology, data, facilities, and third parties.
• Identify resilience vulnerabilities, single points of failure, recovery gaps, and concentration risks; plan remediation actions.
• Design, plan, and facilitate severe but plausible scenario testing to assess tolerance performance.
• Submit scenario testing outcomes to governance for approval and remediation decisions.
• Track scenario actions to closure and embed improvements into plans and controls.
• Support incident and crisis response with service impact assessment and dependency insights.
• Coordinate post-incident reviews to verify tolerance adherence and identify improvements.
• Coordinate annual resilience self-assessments and develop dashboards and MI for executives.
• Engage stakeholders to promote ownership of resilience requirements and facilitate workshops and training.
• Act as SME for Operational Resilience practices and governance expectations.
• Ensure compliance with policies and local governance requirements.

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. The Operational Resilience Lead is responsible for leading the implementation, embedding, and continuous improvement of the organization’s Operational Resilience framework in line with Group Operational Resilience Policy, applicable standards, and local governance expectations. The role provides leadership across critical business services, impact tolerances, dependency mapping, scenario testing, vulnerability management, self-assessment, reporting, and incident learning to ensure the organization can remain within approved tolerances during severe but plausible disruptions.

Operational Resilience Framework and Governance

• Lead the implementation and ongoing enhancement of the Operational Resilience framework, standards, procedures, and methodologies in alignment with Group Operational Resilience Policy, regulatory expectations, and local business requirements.
• Ensure relevant Board, Executive, and management committee Terms of Reference include appropriate provisions for Operational Resilience oversight, reporting, decision-making, and escalation.
• Coordinate governance approvals for critical business services, impact tolerances, resilience assessments, scenario testing outcomes, risk acceptances, and material remediation plans.
• Highlight operational resilience issues, vulnerabilities, and tolerance breaches to relevant governance forums and coordinate escalation to the second line resilience risk function where required.

Critical Business Services and Impact Tolerances

• Lead business stakeholders in completing criticality assessments against the applicable service taxonomy and Group framework.
• Ensure each identified Critical Business Service has an assigned Service Owner with clear accountability for resilience outcomes.
• Coordinate the validation, approval, and periodic review of the Critical Business Services list through the COO or relevant accountable executive and governance forum.
• Support Service Owners in defining, validating, and maintaining appropriate impact tolerances with required approvals and supporting rationale.

Dependency Mapping, Risk Assessment, and Vulnerability Management

• Lead and maintain end-to-end dependency mapping for Critical Business Services, including people, process, technology, data, facilities, third parties, and other key resources.
• Maintain dependency mapping on an annual basis and whenever material business, technology, vendor, process, or operating model changes occur.
• Identify resilience vulnerabilities, single points of failure, recovery gaps, concentration risks, and service dependencies that may prevent Critical Business Services from remaining within impact tolerance.
• Work with Service Owners, pillar owners, and accountable stakeholders to define resilience plans, remediation actions, risk acceptances, timelines, and escalation requirements.

Scenario Testing and Resilience Exercises

• Design, plan, and facilitate severe but plausible scenario testing for Critical Business Services to assess whether services can remain within approved impact tolerances.
• Ensure test reports clearly document observations, tolerance performance, vulnerabilities, lessons learned, and required management actions.
• Submit scenario testing outcomes and material findings to the relevant governance forum for approval, decision-making, remediation, or risk acceptance.
• Track scenario testing actions to closure and ensure improvements are embedded into resilience plans, controls, and operating procedures.

Incident Learning and Crisis Management Coordination

• Support incident and crisis response activities by providing service impact assessment, dependency insights, vulnerability analysis, and Operational Resilience coordination.
• Coordinate with key business and functional stakeholders to ensure lessons learned and vulnerabilities arising from incidents, crises, and near misses are documented, assigned, and tracked to closure.
• Support post-incident reviews to confirm whether Critical Business Services remained within tolerance and identify required improvements to the resilience framework.

Self-Assessment, Reporting, and Management Information

• Coordinate annual Operational Resilience self-assessments with Service Owners to confirm that Group Operational Resilience Standards and local requirements have been met.
• Develop accurate and timely management information, dashboards, issue trackers, and executive-level reports covering resilience posture, Critical Business Services, impact tolerances, scenario testing, vulnerabilities, remediation progress, and tolerance breaches.
• Maintain complete and auditable documentation for governance approvals, service mapping, resilience assessments, test results, risk decisions, incident learnings, and remediation actions.

Stakeholder Engagement and Capability Building

• Engage Service Owners, business units, enabling functions, and control functions to promote ownership, accountability, and consistent implementation of Operational Resilience requirements.
• Facilitate workshops, awareness sessions, and working group discussions to embed resilience expectations and strengthen cross-functional execution.
• Act as a subject matter expert for Operational Resilience practices, Group requirements, governance expectations, and implementation deliverables.

Compliance

• Ensure that all company policies, procedures, programs and instruction are carried out
• Be familiar and understand Pru Life UK Compliance Standards. Must be fully aware of his/her responsibilities and competent to carry them out to the required standards. Must report all compliance matters openly and honestly to their Compliance Officer in accordance with the reporting requirements operated by the Compliance Officer. Must operate a process within his/her department to ensure that all relevant compliance matters are identified and reported.

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements. We are Prudential. For every life, we are partners. For every future, we are protectors.

Prudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom. Find out more at www.prudentialplc.com Follow us on LinkedIn