Chief Control Office, Manager Operational Resilience

In this role you will: 

• Act as the senior contact for third party risk and third party operational resilience across the Hong Kong entity; promote consistent execution within HSBC’s risk appetite.


• Line manage, coach and develop one direct report; set clear objectives and ensure high-quality delivery.


• Partner with engagement risk owners/managers, control owners, business service owners and risk stewards to deliver third party risk and control enhancements.


• Translate policy into pragmatic actions (steps, timelines, evidence expectations) and drive timely completion through active follow-up.


• Support engagement managers to secure required approvals across onboarding and lifecycle management; ensure pre-contract risk activities are completed before contract execution (or an approved risk acceptance is in place).


• Ensure risk/materiality assessments and control tasks are accurate, evidenced, and maintain a clear audit trail; challenge outputs and drive rework where inputs/evidence are insufficient or inconsistent.


• Review and challenge risk acceptance requests to ensure appropriate documentation and routing for approval (does not approve risk acceptances).


• Ensure issues/breaches are escalated appropriately, remediation plans agreed, and progress tracked to closure; identify opportunities for control rationalisation and cost reduction while maintaining effective coverage.


• Lead oversight of third-party mapping for Operational Resilience for Critical Operations/Important Business Services (including subcontractors and internal delivery services), aligned to the HSBC Operational Resilience Framework and HKMA SPM OR-2; ensure mapping artefacts/handbooks are complete and audit-ready.


• Lead and/or contribute to third party operational resilience vulnerability assessments (including non-traditional third parties); set clear accountability, prioritise issues using consistent decision criteria, and coordinate supplier communications to minimise duplication across markets.

To be successful you will need: 

• Bachelor’s degree in Business Administration, Risk Management, Finance, Technology, or a related subject (or equivalent experience).


• 5+ years’ experience in third party risk management, operational risk, operational resilience, procurement risk, technology risk, or related fields—ideally within a global bank/financial institution; Third Party Risk Management and/or Operational Resilience experience strongly preferred.


• Demonstrable experience leading cross-functional activities and delivering outcomes through influence across multiple stakeholder groups, working across cultures and within a complex matrix structure.


• Strong understanding of risk management principles, third party risk management, operational resilience (including supply chain mapping and vulnerability assessment), and HKMA SPM OR-2 compliance requirements.


• Strong analytical and problem-solving skills, including identifying control gaps, assessing evidence quality, and recommending pragmatic remediation.


• Strong planning and project management skills.


• Excellent written and verbal communication skills in English and Cantonese, with the ability to convey complex concepts to varied stakeholders.


• Assertive, proactive and able to work independently and in a team to manage multiple priorities, collaborate across teams, and challenge constructively.


• Able to deal with uncertainty and changing circumstances (interdependencies, opportunities or risks).


• Proficient in Microsoft Office and familiar with risk/third party management and process mapping tools.