Responsibilities:

Outsourcing Due Diligence and Ongoing Monitoring

• Due Diligence and Ongoing Monitoring of outsourced service providers ("OSP"):

1. Review and evaluate information/documents provided by OSP
2. Guide/assist contract owners on the completion of Outsourcing DD checklists
3. Addressing SME review comments (includes coordination with OSP to address queries)
4. Coordination of clearance and approvals by respective SMEs and COs

• Support to Head of Outsourcing for Management Tasks such as:

1. Preparation of Outsourcing Deck on outsourcing DD results for BROF/BOD meetings.
2. Update of outsourcing register & coordination of review by COs/teams.
3. Reconciliation of outsourcing register with contracts register (Finance/Legal)
4. Preparation of ad hoc information requests (e.g. to support GWS material outsourcing register HKIA reporting).

Third Party Management "TPM" Support

• Provide user guidance for TPM System ("TPM Journey").
• Provide user support in resolving technical challenges related to TPM System, (includes raising SNOW tickets on behalf of COs in urgent cases, troubleshooting, and coordination with TPM tech team (PPCOE) on resolution).
• Generate TPM reports via PowerBI to support ad hoc info requests (e.g. IG CoE's VCC TPM, BCM SME's info requests).
• Support the quarterly KRIs reporting (tracking of status of Expired Contracts/TPMs).

RCA / ISAE 3402 / Breach & Errors Reporting

• Support the annual Risk & Control Assessment (RCA) process:

1. Facilitate teams in completion of RCA (updates of controls description etc.).
2. Providing user guidance and support on completing certification on the eGRC system.

• Support the ISAE3402 audit process:

1. Collation of information and review of audit requests.
2. Coordination of walkthroughs with departments.

• Support on Breach and Errors reporting (Error Log) and reporting of error statistics to EXCO/BOD (Coordination with IAI)

Requirements:

• Bachelor's degree in Business, Finance, Accounting or Risk Management.
• Min. 5-7 years of experience in reviewing business operations and conducting outsourcing and/or operational risk assessments.
• Experience in compliance or audit would be considered too.
• CPA holders would be highly regarded.
• Experience in asset management firms, banks or consulting.