Strategic Sourcing Services

Hang Seng strives to provide world class standard services to our customers and exercise proactive risk management.

HASE Digital Business Services (DBS) is a pivotal part of the HASE, providing essential operational and technical support to our global businesses and helping improve customer service and efficiency. Digital Business Services combines global expertise and technology to help keep us ahead of the competition.

Should you join DBS function, you will contribute in driving continuous quality improvement to increase business partner and customer satisfaction. You will have opportunity to take part in formulating internal control strategy and fostering an effective risk and control environment. You will work closely with various departments to understand their operational and procurement needs, so as to structure comprehensive solutions to aid them to operate efficiently and excellently.

We are currently seeking a high calibre professional to join our team as a Senior Manager - Third Party Risk Management.

Principal Responsibilities

• The Third Party Risk Management (TPRM) team delivers services to HASE’s 1st line businesses and functions. The role of the Senior Manager - Third Party Risk Management is to lead Third Party Risk, Contracts Lifecycle Management (CLM), Supplier Management (SM), Internal Third Parties and outsourcing management - collectively Third Party Management (TPM).
• The role holder will: interface with key local businesses, functions and stakeholders to provide support and drive improvement across the topics underpinning TPM; tailor programs of work to improve third party management and control; provide MI and analytics from a risk, supplier management, outsourcing, and criticality perspective; establish effective governance arrangements for Third Party Management and Oversight (including outsourcing oversight) within the bank; and support with 1st line oversight of key third parties and regulatory matters. The role holder should have a good understanding of all these areas but will be expected to lead specific areas from these
• The COO, on behalf of CEO and the Board of Directors, retains the ultimate accountability for the risks associated with the activities provided by third parties to the entity. The role holder, by working with Head of TPRM, is responsible for delivering and leading the supporting capabilities that enable the COO to deliver on that accountability
• The role holder will need to be a credible operational subject matter expert in Third Party Management and the regulatory context in financial services, with first-hand experience of developing, leading and improving aspects of third party risk management in large, complex organizations. In addition, the proven capability to network, communicate, influence and making strategic change happen pragmatically at pace will be key to success in this role
• The role of the TPRM is to ensure the bank is protected from the risks of using internal and external third parties & non-traditional third parties by establishing framework and guidance, oversee execution is as per framework and continuously improving
• Balancing the ongoing transformation of the TPM service and requirements alongside the BAU delivery of TPM.
• Challenging and evolving regulatory environment, which requires the ability to respond to regulatory needs with a balanced approach to risk and operational requirements
• Staying ahead of regulatory expectations, 3LOD observations and emerging third party risk topics such as core subcontractors, ethics and modern slavery and deeper sanction screening requirements within supply chains
• Ensuring that Third Party Risk, Contracts Lifecycle Management, Supplier Management and outsourcing management processes remain efficient and effective; maintain effective quality assurance; and do not become “tick box exercises”
• Coordinate and produce periodic MI for the committees and businesses

Requirements

• Experience in risk or control management
• Subject matter expert and proven track record in managing third party risks
• Deep understanding of globally leading and local regulatory requirements related 
• Ability to translate global, regional and local priorities to direct local activities
• Strong stakeholder management and Influencing skills
• Ability to make decisions including when under pressure and to tight deadlines
• Experience of working in highly regulated and complex organisation
• Excellent written and verbal communication skills, with the ability to influence stakeholders at all levels
• Ability to balance multiple competing demands to find the best solutions
• Innovative and critical thinking
• High ethical standards
• Fluency in Chinese and English a pre-requisite

(Less experience candidate will be considered as Manager – Third Party Risk Management)