Head of Technology and Operational Risk

Consultant:

Chen Yi Ooi

Job Reference No.

Registration No.

R1876389

License No.

16S8060

Function

Cybersecurity & GRC

This is a senior leadership appointment with broad regional/global exposure, responsible for strengthening the organisation’s risk management capabilities across an increasingly complex technology and operational environment. The role will lead a team of professionals and partner closely with senior stakeholders across Technology, Operations, Cybersecurity, Business, Risk and Compliance.

Key Responsibilities:

Lead the Technology & Operational Risk function, covering technology risk, operational risk and operational resilience.
Provide independent risk oversight and challenge across major technology initiatives, digital transformation, cloud adoption, cybersecurity and emerging technologies.
Establish and continuously enhance technology and operational risk frameworks, policies, standards and governance.
Oversee identification and assessment of key technology and operational risks, control effectiveness, risk acceptance and remediation.
Strengthen operational resilience, including critical business services, scenario testing, business continuity, disaster recovery and third-party dependencies.
Provide risk oversight of technology incidents, operational events and control failures, ensuring appropriate root-cause analysis and remediation.
Assess risks arising from AI, automation, cloud, data and other emerging technologies, working with relevant specialists to establish appropriate governance and controls.
Oversee third-party and technology supplier risk, including critical outsourcing and concentration risks.
Provide senior management and relevant governance committees with clear reporting on key risks, emerging themes and areas requiring attention.
Maintain effective engagement with relevant regulators and ensure alignment with applicable regulatory expectations.
Partner with first-line Technology, Operations and Business stakeholders while maintaining effective independent oversight and challenge.
Lead, develop and mentor a team of technology and operational risk professionals.

Requirements:

More than 15 years of experience within technology risk, operational risk, operational resilience or non-financial risk within financial services.
Strong technology risk foundation, with a good understanding of areas such as cybersecurity, cloud, infrastructure, applications, data, third-party technology and emerging technology risks.
Demonstrated experience overseeing operational risk and/or operational resilience within a complex financial institution.
Experience operating within a regional or global organisation and engaging senior stakeholders across multiple markets.
Strong understanding of financial services regulatory expectations relating to technology, operational risk and resilience.
Ability to provide credible challenge to senior Technology, Operations and Business leaders while remaining commercially pragmatic.
Strong leadership experience with a track record of building and developing high-performing risk teams.
Excellent communication and executive stakeholder management skills.

To apply:

If you’re interested to apply or find out more, please share across your CV or reach out to Chen Yi at cy@kerryconsulting.com for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.

Reg: R1876389

Lic: 16S8060

Apply for this position

Head of Business Information Security & Cyber Risk

Our client is a leading multinational organisation with an established presence globally. As part of its continued investment in cybersecurity, the organisation is looking for an experienced security...