Participate in related risk management tools as necessary, e.g. Compliance Risk and Control Assessment (CRCA), Risk and Control Self-Assessment (RCSA), New Initiative Risk Assessment (NIRA), Operational Risk Events review, Scenario Analysis.
Strengthen business continuity, crisis management, and operational resilience through planning, testing, and continuous improvement in partnership with country risk leaders, functional experts and enterprise colleagues
Manage Cybersecurity Risk Acceptance process, including the evaluation of non-compliance exceptions and documentation of informed business decisions to accept residual risks.
Collaborate with internal cross-functional teams and external service providers to facilitate IT security reviews, remediate vulnerabilities, and ensure timely closure of project milestones.
Comprehensive understanding of AI technology governance and the entire model lifecycle management, including model validation and performance monitoring.
Support regulatory reviews, including those conducted by the SFC and other regulators. Responsibilities include addressing comments or issues raised, formulating appropriate action plans, and validating the completion of remedial actions where applicable.