Head of Risk Orm Ict Resilience Apac

In Asia Pacific, BNP Paribas is one of the best-positioned international financial institutions with an uninterrupted presence since 1860. Currently with over 18,000 employees* and a presence in 13 markets, BNP Paribas provides corporates, institutional and private investors with product and service solutions tailored to their specific needs. It offers a wide range of financial services covering corporate & institutional banking, wealth management, asset management, insurance, as well as retail banking and consumer financing through strategic partnerships..

Worldwide, BNP Paribas has a presence in 68 markets with more than 193,000 employees. It has key positions in its three main activities: Domestic Markets and International Financial Services (whose retail-banking networks and financial services are covered by Retail Banking & Services) and Corporate & Institutional Banking, which serves two client franchises: corporate clients and institutional investors. Asia Pacific is a key strategic region for BNP Paribas and it continues to develop its franchise in the region.
- excluding partnerships

At BNP Paribas, we passionately embrace diversity and are committed to fostering an inclusive workplace where all employees are valued, respected and can bring their authentic selves to work. We prohibit Discrimination and Harassment of any kind and our policies promote equal employment opportunity for all employees and applicants, irrespective of, but not limited to their gender, gender identity, sex, sexual orientation, ethnicity, race, colour, national origin, age, religion, social status, mental or physical disabilities, veteran status etc. As a global Bank, we truly believe that inclusion and diversity of our teams is key to our success in serving our clients and the communities we operate in.

**Department Overview**
The Global Operational Resilience program within RISK ORM is a critical component in ensuring the Group’s ability to prevent disruptions to its Vital services from occurring, continue to meet its objectives if a disruption or incident does occur and return to normalcy, when disruption or crisis is over. This applies to Cyber, Technology, Supply chains, physical infrastructure and People.

This is part of the Second Line Of Defence (2LOD) teams under the Bank’s Chief Operational Risk Officer.

Operational resilience risk management includes planning, integrating, testing and governing activities to ensure that the group can:

- Identify and manage business and system risks that could lead to disruptions before they occur.
- Prepare for and provide risk oversight of disruptive events (realized risks) in a manner that demonstrates command and control of incident response, coordination and service continuity. Scenarios could include but not limited to Cyber Security Incidents, Technology/Systems Outage, Third Party Suppliers, People or Process Failures.
- Ensure check & challenge and risk advisory on resilience of mission-critical services and operations following an incident within the agreed risk appetite levels.

The above is achieved through main teams such as Cyber Resilience (Detection, Cyber Fraud), IT Resilience, Business Continuity and Crisis Management, Third Party tech Risk.

BNP Paribas is looking for Operational Resilience and Third Party Technology Risk Regional Head within the APA RISK ORM Team, based in Singapore or Hong Kong.

**Position Purpose**:
The role holder will be part of the RISK ORM team, with Group wide as well as APAC region Risk oversight responsibilities for the defined areas. Responsibilities will include second line of defense oversight for Operational Resilience Domains such as Business Continuity/DR, IT Resilience, Cyber Resilience (including Cyber Fraud), Third Party Resilience and Crisis Management.
The role holder will work with the support of and in close co-operation with colleagues in RISK ORM ICT APAC, RISK ORM APAC, Group RISK ORM Operational Resilience as well as 1st line of defense ICT, business and offshoring teams and stakeholders.

**Responsibilities**

**Direct Responsibilities**

**Governance & Oversight**
- Provide risk oversight of Operational Resilience, Third Party Tech Risk, Cyber Fraud related areas, consulting to the business, technical and operations groups
- Drive effective implementation and communication of Operational Risk Management policies and guidelines

**Risk management environment**
- ** Identification & Assessment**: Ensure that the identification and assessment of operational risks are effectively done across the organisation by correlating input from Audit Findings, Internal Loss Data Collection & Analysis, External Data Collection & Analysis, Risk Control Self Assessments, Business Process Mapping, KPIs & KRIs, Scenario Analysis, Quantified Measurement & Comparative Analysis
- **Monitoring & Reporting**: Implement a process to regularly monitor operational risk profiles and material exposure to losses and provide appropriate