Senior Expert, Operational Risk Management (40000817)

Job Purpose

Act as a subject matter expert (SME) in Operational Risk Management, providing independent risk oversight, advisory, and challenge across banking products, processes, and digital initiatives.

The role is responsible for:

• Comprehensive identification, assessment, and mitigation of operational risks (including digital, technology, and third-party risks)
• Leading and enhancing Risk & Control Self-Assessment (RCSA) practices across business units
• Acting as a trusted advisor to senior stakeholders in embedding risk-aware decision-making
• Driving the continuous improvement of operational risk frameworks aligned with Basel, regulatory expectations, and Techcombank standards

Key Accountabilities (1)

Operational Risk Advisory & Oversight

• • Serve as lead risk advisor for assigned business divisions (Retail, Corporate, Digital, Operations, etc.)
  • Provide independent challenge on risk exposure in new/existing products, processes, and strategic initiatives
  • Ensure effective implementation of the Operational Risk Management Framework

Risk Identification & Assessment (Core Expertise):

Lead end-to-end risk identification, analysis, and assessment across:

• • Banking products (lending, deposits, cards, trade finance, treasury, etc.)
  • Operational processes and customer journeys
  • Digital platforms and ecosystems (mobile banking, APIs, fintech integration)

Apply advanced methodologies:

• RCSA (Risk & Control Self-Assessment)
• Scenario analysis & stress testing
• Risk taxonomy mapping

Validate risk severity, control effectiveness, and residual risk positioning

Key Accountabilities (2)

RCSA Leadership

• Design, standardize, and continuously improve RCSA methodology and governance
• Lead RCSA workshop facilitation with senior business leaders
• Ensure:
• Accurate risk identification and control design
• Strong linkage between risks, KRIs, incidents, and issues
• Actionable remediation plans with clear ownership
• Provide quality assurance and challenge to ensure RCSA outputs are robust and decision-useful

Key Accountabilities (3)

Digital & Product Risk Assessment:

• Act as risk SME for digital banking initiatives, including:
  • New digital product launches
  • System transformations (e.g., core banking, omni-channel, AI-driven services)
• Assess risks related to:
  • System failures, cyber threats, and data integrity
  • Customer experience disruption
  • Third-party/vendor dependencies
• Ensure alignment with emerging risk practices (e.g., model risk, AI risk, operational resilience)

Portfolio Monitoring & Reporting:

• Monitor operational risk profile, including:
  • Key risk indicators (KRIs)
  • Operational loss events
  • Control effectiveness trends
• Prepare insightful risk reports for senior management and committees
• Recommend proactive mitigation strategies

Leadership & Capability Building:

• Provide technical leadership and mentoring to junior team members on:
  • Risk assessment techniques
  • RCSA execution
  • Product/process risk analysis
• Lead training and communication programs to strengthen risk culture across business units

Key Relationships - Direct Manager

Head of Compliance and Operational Risk/Director, Operational Risk Management

Key Relationships - Internal Stakeholders

Related internal and external Division/Unit (related functions, customer segments..)

Key Relationships - External Stakeholders

State management agencies, Partners, Customers

Success Profile - Qualification and Experiences

Qualification:

• Bachelor’s degree or above in Finance, Banking, Risk Management, Economics, Law, or related fields
• Master’s degree or professional certifications (FRM, PRM, CFA) preferred

Experience:

• Minimum 12+ years of experience in banking/financial services
• At least 3–5 years in senior expert/manager role in:
  • Operational Risk Management
  • Internal Audit / Compliance / Risk Advisory
• Proven experience in:
  • RCSA design and facilitation
  • Product and process risk assessment
  • Digital/technology risk assessment
• Strong exposure to end-to-end banking products and customer journeys

Deep knowledge of:

• • Commercial banking products and operations
  • Operational risk frameworks (Basel II/III, ORX practices)
  • RCSA, KRI, scenario analysis