Manager Risk Oversight & Assurance

Habib Bank AG Zurich; Karachi Division; On-site; PKR 3,600,000 - 6,000,000; Full time

Job summary

Habib Bank AG Zurich in Karachi seeks a Manager Risk Oversight and Assurance to strengthen the operational risk framework. You will manage RCA programs, validate controls, and oversee issue resolution in line with FINMA and other regulator expectations.

Reporting to the Unit Head – Operational Risk Framework & Implementation, you will collaborate with business and risk stakeholders across jurisdictions to ensure effective risk governance and timely remediation of findings.

Qualifications

• Bachelor's degree in finance, business administration, risk management, accounting, or related field.
• 5–7 years of experience in Operational Risk Management or related functions within banking/financial services.
• Hands-on experience in RCA, operational risk governance, issue management, control validation, and assurance activities.
• Experience facilitating risk and control assessment workshops across multiple functions and jurisdictions.
• Strong understanding of risk management principles, governance frameworks, risk assessment methodologies, and control validation practices.
• Knowledge of Basel operational risk principles and FINMA expectations is advantageous.
• Excellent verbal and written communication skills in English.
• Detail-oriented with a strong risk and control mindset.

Responsibilities

• Manage RCA program across the organization, challenge assessment results, identify risks and improve methodologies.
• Identify opportunities to strengthen RCA using best practices and emerging risk insights.
• Collaborate with business, risk, and control stakeholders across countries and GSFs to assess risks and controls.
• Review RCA submissions for accuracy and timely updates; monitor remediation of identified issues.
• Manage execution and enhancement of the control validation program to assess key controls.
• Ensure compliance with internal risk policies and regulatory requirements; support FINMA expectations.
• Prepare reports on findings to business owners, heads of departments, and group functions.
• Engage stakeholders and communicate with GRCC, RCC/BOD on control validation results.

Skills

Analytical thinking

Problem solving

Presentation skills

Report writing

Communication skills

English fluency

Education

Bachelor's degree in finance, business administration, risk management, accounting, or related discipline

Master's degree

FRM

CIA

CRISC

CISA

Tools

Microsoft Office

Job description

Habib Bank AG Zurich is a Swiss-incorporated bank that was established in 1967, embodying a rich tradition of banking excellence and a commitment to providing personalized financial services. Known for its robust focus on international banking and finance, the bank caters to both individual and corporate clients, offering a wide range of products including private banking, commercial loans, and online banking solutions. We have a presence in eight geographies across four continents. The bank prides itself on its customer-centric approach, ensuring that clients receive tailored financial solutions designed to meet their unique needs.

About the role:

The Manager Risk Oversight and Assurance, plays a pivotal role in strengthening our operational risk management framework as part of the second line of defense. This individual is responsible for the comprehensive management of risk and control assessments, ensuring the effectiveness of control validation or assurance processes, and the diligent management and resolution of operational risk issues, including audit findings. Knowledge and understanding of regulatory risk requirements from FINMA, HKMA, UAE CB, SBP, OSFI, PRA / FCA etc. would be beneficial.

The role reports into the Unit Head – Operational Risk Framework & Implementation who is also located in Karachi.

Responsibilities:

Risk and Control Assessments:

• Manage and oversee the execution of the Risk and Control Assessment (RCA) program across the organization. Provide effective challenge to assessment results, identify emerging risks and control weaknesses, and recommend enhancements to assessment methodologies, processes, reporting, and overall program effectiveness.
• Identify opportunities to strengthen the RCA program through the adoption of best practices, lessons learned, and emerging risk insights.
• Collaborate closely with business, risk, and control stakeholders across Countries and Group Support Functions (GSFs) to facilitate the identification and assessment of key risks and controls in line with the established RCA methodology, risk appetite, and risk management standards. Ensure the timely completion of assessments and effective remediation of identified issues, contributing to the continuous strengthening of the control environment.
• Review RCA submissions to ensure accuracy, completeness, and timely updates. Conduct sample-based and independent reviews of key operational controls to assess their design and operating effectiveness, identify control gaps or weaknesses, and recommend appropriate corrective actions. Monitor the implementation of agreed action plans to ensure timely remediation of identified issues.

Assurance and Compliance:

• Manage the execution and continuous enhancement of the control validation program to independently assess the design and operating effectiveness of key controls in mitigating operational risks.
• Ensure that the control validation methodologies are in line with best practices and regulatory requirements. This is also in line with FINMA expectations to have key controls independently validated and reviewed periodically. Where required, deep dive in various processes / key areas are to be carried out in support of Risk Control Assessments.
• Ensure compliance with internal operational risk policies, directives, and guidelines across the bank. Conduct independent and thematic reviews to assess compliance with regulatory requirements related to operational risk and other associated risk classes specifically for FINMA & other regulators (as applicable).

Issue Management:

• Review the inventory of operational risk issues management process, including the identification, documentation, tracking, and resolution of issues. This should be challenged for completeness and follow-through on conclusion / closure.

Audit Findings Review:

• Work closely with internal and external auditors to understand audit findings related to operational risks.
• Work with Internal and External Audit to monitor very high, high and medium risk findings and review them to ensure control designs and actions are in line with the findings.
• Ensure that appropriate corrective actions are developed, implemented, and tracked to completion.

Reporting and Communication:

• Prepare comprehensive reports on findings from reviews and control validations, providing clear insights and recommendations to business owners, heads of departments, and group functions.
• Regularly update senior management on the status of compliance and risk management activities, highlighting potential areas of risk and impact on the bank.
• Facilitate communication and information flow between business units and the Group Operational Risk function to ensure alignment and awareness of risk management practices.
• Provide updates to the Group Risk & Control Committee (GRCC) and the RCC / BOD for key control validation results and material observations.

Stakeholder Engagement:

• Act as a key liaison between the Group Operational risk function and other GSFs including but not limited to Group Operation & Systems, Group Information Technology, Group Information Security and Group Internal Audit; aligning and coordinating and sharing of information, best practices etc. to ensure the objectives of the organization are being met.

Regulatory Compliance:

• Stay abreast of new regulations and changes in the regulatory environment, particularly FINMA requirements affecting the banking sector.
• Ensure all operational risk practices comply with FINMA regulations and standards and prepare documentation and evidence for regulatory inspections and audits.

Training and Awareness:

• Develop and deliver training programs aimed at enhancing risk awareness and understanding of control responsibilities amongst the Countries and GSFs.

Requirements:

• Bachelor's degree in finance, business administration, risk management, accounting, or related discipline. A master's degree and/or professional certifications such as FRM, CIA, CRISC, CISA, or equivalent are preferred.
• 5-7 years of relevant experience in Operational Risk Management, Risk Assurance, Internal Audit, Internal Controls, Risk Validation, or related functions within the banking or financial services industry.
• Hands-on experience in Risk and Control Assessments (RCA), operational risk governance, issue management, control validation, and assurance activities.
• Experience in facilitating risk and control assessment workshops and engaging with business stakeholders across multiple functions and jurisdictions.
• Sound understanding of operational risk management principles, risk governance frameworks, risk assessment methodologies, and control validation practices.
• Knowledge of Basel operational risk principles, regulatory frameworks, and compliance requirements applicable to international banking institutions. Familiarity with FINMA expectations and requirements will be an advantage.
• Strong analytical, problem-solving, presentation, and report-writing skills, with the ability to interpret risk information, identify trends, and provide meaningful insights.
• Ability to provide effective challenges to stakeholders while maintaining constructive and collaborative working relationships.
• Strong stakeholder management, facilitation, communication, and influencing skills, with the ability to engage effectively across all levels of the organization.
• Proficiency in Microsoft Office applications and experience with risk management systems will be an advantage.
• Excellent verbal and written communication skills, with fluency in English is a must.
• Detail-oriented with a strong risk and control mindset, capable of identifying emerging risks, control weaknesses, and opportunities for improvement.