- Broad Coverage across Non-Financial Risks
- Strong Operational Risk and Technology Risk Focus
- Senior Leadership Opportunity in 2LOD
Our client is a prominent financial services group with an established presence in Hong Kong offering a broad range of market products supported by sophisticated infrastructure and technology platforms. This is an exceptional opportunity for a senior risk leader to establish and drive their operational risk, technology risk and resilience risk management agenda. This role carries responsibility for overseeing multiple specialist Non-Financial Risk Management teams and developing an integrated resilience framework that strengthens the firm’s ability to prevent, withstand, respond to and recover from operational disruptions.
The key responsibilities for this position are as follows:
- Lead the development and execution of the organization’s operational risk, technology risk and resilience strategy as Second Line of Defense, ensuring alignment with business objectives, governance standards, and risk management priorities.
- Design, implement, and continuously enhance a comprehensive operational resilience framework that integrates business continuity, crisis management, technology resilience, cyber resilience, and third-party risk management.
- Establish and maintain a clear understanding of critical business services, operational processes, and key dependencies, including people, technology, data, facilities, and external providers.
- Oversee resilience testing, scenario analysis, and recovery exercises to evaluate the organization’s ability to withstand and recover from significant disruption events.
- Provide leadership during major incidents and crisis situations, ensuring effective decision-making, stakeholder communication, service recovery, and post-incident review.
- Maintain strong relationships with regulators and ensure compliance with relevant operational risk, technology risk and resilience requirements across multiple jurisdictions.
- Partner with senior leaders across business, operations, technology, legal, compliance, finance, and human resources functions to embed resilience considerations into strategic and operational decision-making.
- Strengthen oversight of critical third parties through robust due diligence, ongoing monitoring, resilience assessments, and contingency planning arrangements.
- Build and promote a strong culture of risk management and resilience through training, awareness programmes, leadership engagement, and enterprise-wide preparedness initiatives.
- Monitor emerging risks, regulatory developments, industry trends, and evolving threats to drive continuous improvement in risk management capabilities and enhance organizational readiness.
Successful applicants will have the following skills and experience:
- Extensive senior leadership experience within financial services, capital markets, banking, or other highly regulated industries, with direct responsibility for operational risk, technology risk, cyber risk, third-party risk, resilience, business continuity, or enterprise risk management.
- Deep understanding of operational risk management and resilience principles, regulatory expectations, and industry best practices across major global financial jurisdictions.
- Strong knowledge of financial market infrastructure, operational risk frameworks, technology dependencies, cyber resilience, and third-party risk management.
- Demonstrated ability to engage and influence regulators, boards, executive committees, and senior stakeholders across complex organizations.
- Proven track record of leading organizations through major incidents, crisis situations, large-scale transformation initiatives, and periods of significant change.
- Strategic and commercially minded leader who can balance regulatory obligations, operational requirements, and broader business objectives.
- Familiar with the Hong Kong, China and / or Asia financial markets.
- Excellent communication skills with fluency in English, additional fluency in Cantonese and / or Mandarin would be advantageous but not required.
