Job Purpose
Act as a
subject matter expert (SME) in Operational Risk Management, providing
independent risk oversight, advisory, and challenge across banking products, processes, and digital initiatives.
The Role Is Responsible For
- Comprehensive identification, assessment, and mitigation of operational risks (including digital, technology, and third-party risks)
- Leading and enhancing Risk & Control Self-Assessment (RCSA) practices across business units
- Acting as a trusted advisor to senior stakeholders in embedding risk-aware decision-making
- Driving the continuous improvement of operational risk frameworks aligned with Basel, regulatory expectations, and Techcombank standards
Key Accountabilities (1)
Operational Risk Advisory & Oversight- Serve as lead risk advisor for assigned business divisions (Retail, Corporate, Digital, Operations, etc.)
- Provide independent challenge on risk exposure in new/existing products, processes, and strategic initiatives
- Ensure effective implementation of the Operational Risk Management Framework
Risk Identification & Assessment (Core Expertise)
Lead
end-to-end risk identification, analysis, and assessment across:
- Banking products (lending, deposits, cards, trade finance, treasury, etc.)
- Operational processes and customer journeys
- Digital platforms and ecosystems (mobile banking, APIs, fintech integration)
Apply Advanced Methodologies
- RCSA (Risk & Control Self-Assessment)
- Scenario analysis & stress testing
- Risk taxonomy mapping
Validate risk severity, control effectiveness, and residual risk positioning
Key Accountabilities (2)
RCSA Leadership
- Design, standardize, and continuously improve RCSA methodology and governance
- Lead RCSA workshop facilitation with senior business leaders
- Ensure:
- Accurate risk identification and control design
- Strong linkage between risks, KRIs, incidents, and issues
- Actionable remediation plans with clear ownership
- Provide quality assurance and challenge to ensure RCSA outputs are robust and decision-useful
Key Accountabilities (3)
Digital & Product Risk Assessment- Act as risk SME for digital banking initiatives, including:
- New digital product launches
- System transformations (e.g., core banking, omni-channel, AI-driven services)
- Assess risks related to:
- System failures, cyber threats, and data integrity
- Customer experience disruption
- Third-party/vendor dependencies
- Ensure alignment with emerging risk practices (e.g., model risk, AI risk, operational resilience)
Portfolio Monitoring & Reporting- Monitor operational risk profile, including:
- Key risk indicators (KRIs)
- Operational loss events
- Control effectiveness trends
- Prepare insightful risk reports for senior management and committees
- Recommend proactive mitigation strategies
Leadership & Capability Building- Provide technical leadership and mentoring to junior team members on:
- Risk assessment techniques
- RCSA execution
- Product/process risk analysis
- Lead training and communication programs to strengthen risk culture across business units
Key Relationships - Direct Manager
Head of Compliance and Operational Risk/Director, Operational Risk Management
Key Relationships - Internal Stakeholders
Related internal and external Division/Unit (related functions, customer segments..)
Key Relationships - External Stakeholders
State management agencies, Partners, Customers
Success Profile - Qualification and Experiences
Qualification
- Bachelor's degree or above in Finance, Banking, Risk Management, Economics, Law, or related fields
- Master's degree or professional certifications (FRM, PRM, CFA) preferred
Experience- Minimum 12+ years of experience in banking/financial services
- At least 3–5 years in senior expert/manager role in:
- Operational Risk Management
- Internal Audit / Compliance / Risk Advisory
- Proven experience in:
- RCSA design and facilitation
- Product and process risk assessment
- Digital/technology risk assessment
- Strong exposure to end-to-end banking products and customer journeys
Deep Knowledge Of- Commercial banking products and operations
- Operational risk frameworks (Basel II/III, ORX practices)
- RCSA, KRI, scenario analysis
