Senior Vice President, Chief Controls Officer for

-Job description

**Some careers grow faster than others.**

If you’re looking for a career that will give you plenty of opportunities to develop, join HSBC and your future will be rich with potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC Digital Business Services is a pivotal part of the Group, providing essential operational and technical support to our global businesses and helping improve customer service and efficiency. Digital Business Services combines global expertise and technology to help keep us ahead of the competition.

We are currently seeking a high calibre professional to join our team as a **Senior Vice President, Chief Controls Officer for Technology, Cyber and Data Risks.**

**Principal Responsibilities**

The Singapore Chief Controls Office (CCO) team sits under the Chief Operating Office and supports the Country COO to provide oversight of the risk and control environment across Digital Business Services (DBS) and the Singapore market.

The CCO team is responsible for embedding the Non-Financial Risk Framework across DBS and Singapore, and leading risk and control remediations (as required). In addition, the CCO team will also help to lead and influence conversations with Senior Management and Regulators. The role is particularly critical with the increased regulatory focus on Technology and Cybersecurity (TCS) risks, as well as technology and operational resiliency, as evidenced by the heightened regulatory expectations in recent months.

This job acts as a First Line of Defence and ensures the Bank operates within its risk appetite by providing specialist risk and control knowledge and insights, promoting risk and control monitoring and decision-making. The CCO team also identifies trends to anticipate future developments in the risk and control environment, positively challenges poor controls, tasks, and behaviours and helps to inculcates a strong control mindset within the organisation.

Key responsibilities of this role include:

- Non-financial Risk management - support 1LOD TCS teams to ensure that the Risk Framework is appropriately used for decision making; encourage best practices that ensure all procedures are well documented and regulatory policies are up to date and encourage evaluation of the design effectiveness of the Risk Framework to ensure the promotion of continuous improvement
- Review and Challenge - support Risk and control (R&C) challenge activity, scenario testing and deep dive assurance activities as required; and take an active role in 1LOD and 2LOD TCS related meetings, committees and forums offering constructive and informed input and challenge
- Timely Escalation - alert and escalate TCS issues and incidents, any significant changes to the TCS risk environment, deteriorating risk exposures, new vulnerabilities or evidence of the crystallisation of emerging risks to senior management in a timely manner
- Control Advisory - first point of contact to provide TCS related advice and support to the TCS teams and support the ongoing development of the TCS risk and control environment; support the TCS teams through audits, assurance reviews etc. and ensure the outcomes are appropriate with the risks clearly identified
- Governance - support the Singapore CIO HSBC to ensure effective TCS risk oversight and governance, working closely with the TCS risk stewards in 2LOD
- Regulatory Support - support the TCS teams in their interactions with Regulators e.g. inspections, surveys, consultation papers, responses etc. and review and challenge all responses and submissions to the Regulators
- Change Execution - support the TCS teams to manage internally or externally driven changes impacting TCS risks, working with stakeholders across the Bank where required and driving the change until closure/completion
- Enterprise Wide Risk Assessment (EWRA) - end to end coordination of the EWRA, by working closely with GB/GF stakeholders locally to seek inputs and undertake the assessment, obtain sign off from 2LOD risk stewards and country CEO for the final country ratings and document this accordingly for RMM noting
Requirements

The role holder will have knowledge, skills and experience in the following areas:

- In depth knowledge and experience of implementing non-financial risk frameworks and managing non-financial risks consistently and effectively in line with the agreed risk appetite, preferably in a large financial organization
- Ability to present complex Technology concepts, solutions etc. clearly to non-technical stakeholders in a credible manner and demonstrate a strong awareness of the business dependency on Technology and Cyber
- Ability to methodically analyse complex sets of data and requirements and provide an accountable SME opinion or challenge, and provide direction to 1LOD and Business stakeholders to ensure they