Director, Head of Operational Resilience Risk Oversight Lam

-Job description**Role Purpose**

Global Enterprise Risk Management (ERM) is a sub function of Group Risk and Compliance. Its purpose is to make sure HSBC is equipped with a coherent Risk Management Framework, Risk Taxonomy and the tools to enable it to understand and operate within its Global Risk Appetite and effectively manage its overall risk position. It seeks to strengthen the risk culture across the organisation through driving consistent risk management practices across our businesses and functions at global, regional and market level. ERM achieves this through robust oversight and stewardship of the end-to-end processes, risks, and controls ensuring it complies with risk, business and regulatory priorities. Enabling the bank to grow safely, be forward looking, and meet its strategic objectives.

The role holder will be accountable for Active Risk Management for ERM activities for non-lines of business ( Group infrastructure) across the Latin America region based on the Group’s defined approach to proactively identifying, assessing, measuring, reporting on, mitigating and controlling risk exposures associated with HSBC’s businesses and operations at all levels of the organisation, acting as the risk steward for Operational Risk, Technology and Cyber risk, Data and Privacy risk, Third Party Risk Management, Business Interruption Incident Response, Facilities Availability, Safety and Security, Transaction Processing & Payments and change risk. Accountable of the integrity and timely completeness of risk and control identification, assessment and information within the Group’s Risk and Control system of record as well as directing documented remediation plans for residual risks.

**Accountabilities**
- Acting a local Risk Steward for all appropriate risk types.
- Setting the local approach for ‘Active Risk Management’ (based on Group defined approach) for execution in the region.
- Providing robust challenge and actionable, contextual guidance across all risks both enabling business growth whilst maintaining related risks within appetite.
- Ensuring that Risk appetite measures align to strategic priorities, both local and global.
- Contributing to the design of the Risk taxonomy and framework.
- Responsibility for the implementation of the ERM framework and regular review of the use and adoption of the Risk Management Framework (RMF) for all risk types.
- Monitoring internal and external risk trends and ensures that mitigating strategies and policies are developed.
- Responsibility for the review of internal and external events, providing insight and learnings as necessary.
- Ensuring that the effectiveness of internal control activity is properly monitored.
- Risk Oversight of Functions/Businesses/Countries.
- Aggregated reporting/analysis of the environment, thematic analysis and read across for appropriate risk types.
- Completing analytical assessments and if required, opining on the control environment of the First Line of Defense (1LOD) within the region from an ERM perspective.
- Oversight of appropriate change programs.
- Regional Risk Stewardship of Business Interruption Incident Response, Facilities Availability, Safety and Security and Transaction Processing & Payments

Regional Stewardship of Cyber & Technology, Data and privacy risk.
Requirements**Knowledge and Experience**
- Experience in risk management at a Globally Significant Financial Institution (GSFI).
- Understands the risk landscape of HSBC Group and its commercial context and strategic ambitions and the importance of the maintenance and management of key frameworks.
- Very strong knowledge of the relevant regulatory landscape and ability to assess the impact of proposed changes in regulatory rules to the bank, especially those that will impact the Risk appetite.
- Extensive knowledge of a financial institutions business model, products and key risk drivers and a demonstrated ability to effectively balance risk management, regulatory expectations, and commercial pragmatism.
- A deep understanding and technical expertise of developing, embedding and maintaining risks, including how these risks can be identified, assessed, monitored and controlled and mitigated where relevant.
- Ability to lead and promote a strong risk control culture and develops communication strategies to improve risk awareness.
- Significant experience of establishing and maintaining external relationships ideally with regulators.
- Proven ability to develop strong networks with key stakeholders at all points in a matrix structure, creating an ability to execute task at hand with minimum conflict.
- Leading a multi-locational team of professionals.
- Providing expert advice and robust challenge by delivering risk management policies and managing risks and controls.

**Skills**:

- Ability to present complex technical concepts and results to non-technical audiences in a persuasive and compelling manner.
- Team-oriented mentality combined with ability to complet