Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Assistant Manager Business Resilience Citro and Data - IWPB BRR UTILITY HSBC HK RC.

Principal responsibilities

Stakeholder Collaboration:

Being the primary contact point for Third Party Risk related matters.

Liase with various stakeholders including Engagement Risk Owners, Engagement Managers, Case Manager in GTPM HUB, Control Owners, Business Service Owners, Risk Stewards to implement Third Party risk and control related enhancements/activities.

Communicate the importance of Third Party Risk Management to various key stakeholders while ensuring that the Third Party Risks are within HSBC’s Risk Appetite.

Training and Awareness:

Support continuous improvements on the Third Party Risk Management Framework while upskilling staff, improving process performance, and risk management effectiveness.

Risk Assessment and Mitigation:

Assist and support Engagement Managers to ensure that a) appropriate approvals are obtained during various steps of the Third Party Onboarding process and b) Risk Assessments, Materiality Assessments and Control Tasks are completed accurately.

Ensure that contracts are not executed prior to completion of all pre-contract risk activities unless the appropriate risk acceptance is in place.

Challenge the outputs of the Risk Assessment by spotting illogical inputs.

Identify opportunities for and implement control rationalization and cost reduction initiatives.

Breaches or issues are escalated, and remediation plans in place and monitored.

Work with various stakeholders to update the Business Risk and Control Assessments and the Continuous Control Monitoring to reflect the end-to-end Third Party Risk Management.

Third Party Due Diligence: Ensure Third Party due diligence tasks are completed on a timely basis.

Third Party Record Keeping: Ensure Third Party records are accurate, well maintained and kept up to date.

Monitoring and Reporting:

Produce Management Information to explain the Third Party Risk Portfolio while ensuring compliance to the Third Party Risk Policies.

Exceptions are escalated, tracked resolved and reported through the Governance Forum.

Facilitate senior management decision making using analytical and problem solving skills to make recommendations from risk and control perspective.

Ensure that deadlines are met.

Audit and Compliance:

Answer queries on the Third Party Requirements ensuring that there are no breaches or adverse audit findings.