Mox Bank

Digital bank offering cards and wealth

Third Party Risk and Cloud Governance Manager

Security Governance, Risk & CompliancePosted on Nov 9

Full-timeHong KongNo salary listedIn-person

About the Job

Requirements

At least 5 years of experience in technology, supply chain, or resiliency risk management or related supply chain risk positions, including experience in risk, governance, audit, technology risk, or cybersecurity.
Experience in a consulting or advisory capacity is desirable but not required.
Demonstrated understanding of technology risks, especially cloud operations and third-party risks.
Experience in cyber governance, risk management, operational risk, or supply chain risk.
Ability to lead discussions with operational staff at all levels, business leaders, and colleagues.
Ability to communicate technology risk concepts to technical and nontechnical audiences at different organizational levels.
A strong control mindset and confidence serving as the go-to person on third-party, technology, and resiliency risk matters.
Ability to provide effective challenge and recommendations while building respectful relationships across functions.
Ability to thrive in a fast-paced, multicultural environment with varying day-to-day duties and fluid responsibilities.

Responsibilities

Drive execution of the Third Party Risk function by collaborating across the three lines of defence and with contract owners in a technology banking environment.
Collaborate with technology, business, and all lines of defence to ensure supply chain risk items are tracked, addressed, and maintained in accordance with the risk management framework and risk appetite.
Review, track, and report vendor and cloud risk assessments to mitigate supply chain risks to the bank.
Work with contract owners and risk stakeholders to facilitate vendor onboarding and oversee required due diligence risk assessments.
Ensure compliance with the Cloud Governance Framework and Third Party Risk Management policies, integrating these activities into broader bank risk management practices.
Develop and maintain third-party risk and control monitoring plans, conduct monitoring activities, and analyze evidence to determine control design and operational effectiveness.
Work closely with other Risk personnel to manage overlapping duties, including risk assessments, governance reporting, and cloud-based risks associated with new solutions.
Deliver training and participate in awareness campaigns to make risk management clear and embed a risk-control culture.
Adapt to changes in strategy and the control and regulatory landscape.

Desired Qualifications

Consideration may be given to candidates with more experience for the Lead position.

About Mox
Mox is built by and for the ones who aspire to live life to the fullest – we call them Generation Mox! The name Mox reflects the endless opportunities we can create, - Mobile eXperience; Money eXperience; Money X (multiplier), eXponential growth, eXploration… it’s all up for us to define together.

Why Mox
Everything at Mox – from our products, features, to rewards – is designed based on customer research, tailor made for your needs. We care about what customers care about, especially in data security and privacy. Data ethics is core to everyone here at Mox. Mox rewards you with an array of banking and lifestyle benefits. Who says banking can’t be fun?

Who are we looking for?
Reporting to the Head of Digital Risk and Resilience, this role is responsible for the broad program of managing third party and supply chain risks which impact the bank, the governance of said risk, and for ensuring areas of intersection with other risk types are properly identified and managed. Mox Bank is built on world-class technology service providers and this role plays a critical role in managing these cross-domain supply chain risk, promoting resilience and delivering world class services to our customer.

As the Senior Third Party Risk Manager/Lead, you will manage one of Mox’s most important integrated risk types and will be responsible for manage third party risks as an aggregate of cyber, technology, operational and compliance risks arising from our use of technology.

Drive the execution of the Third Party Risk function by collaborating across the 2 lines of defence and with contract owners within a fast-paced technology banking environment in order to
Engage and collaborate with technology, business, and all lines of defence to ensure that supply chain risk items are appropriately tracked, addressed and maintained in line with the risk management framework and risk appetite.
Review, track and report on vendor and cloud risk assessments to mitigate supply chain risks to the bank.
Work close with various contract owners and risk stakeholders to facilitate vendor onboarding and oversee the required due diligence risk assessments.
Ensure compliance with the Cloud Governance Framework and Third Party Risk Management policies and integrate these cross-disciplinary activities into the broader risk management practices within the Bank.
Develop and maintain third party risk and control monitoring plans, performing monitoring activities and analysis of evidence to determine controls design and operational effectiveness.
Cross-skill and work closely with other Risk personnel to wholistically manage overlapping duties or responsibilities such as risk assessments, governance reporting and management of cloud-based risks associated with new Mox solutions.
Be an agent of change by making risk management relevant to everyone in a clear and succinct manner as we seek to further embed a risk control culture. This may include training delivery and participation in awareness campaigns.
Be open to change over time as we in turn adopt our strategy to meet ever-changing control and regulatory landscape.

5+ years in Technology, supply chain or resiliency Risk management or supply chain risk related positions, including time spent in Risk, Governance, Audit, Technology Risk, Cybersecurity. Ideally, your experience will include time in a consulting or advisory capacity.

We will consider a candidate with more experience in the Lead position.

You should be able to demonstrate:

Excellent communication skills and the ability to martial human capital to achieve risk objectives.
Deep understanding of technology risks, especially cloud operations and third party risks.
Experience in Cyber governance, risk management, operational risk or supply chain risk
Possess strong interpersonal and communication skills and display initiative to lead discussions with operational staff at all levels, business leaders and colleagues
Excellent written and verbal communication skills, proactive, interpersonal, and collaborative skills, and the ability to communicate technology risk concepts to technical and nontechnical audiences at various hierarchical
Strong control mindset and is confident to be the go-to person on 3rd party, technology and resiliency risk matters
Able to provide effective challenge and recommendations whilst building strong, respectful relationships across different functions
Ability to lead and motivate the first line risk and technology teams to achieve tactical and strategic goals.
Thrive in a fast paced, multi-cultural environment where the day to day job varies and lines of responsibility are fluid

About the Company

Mox Bank

Digital bank offering cards and wealth

MOX Bank provides digital-first banking in Hong Kong, backed by Standard Chartered and partners HKT, PCCW, and Trip.com, offering cards, deposits, lending, and wealth management through a fast mobile app. Customers open and manage accounts, make payments and transfers, and access savings and investment options with clear pricing and control from anywhere. Its platform blends support from established financial partners with a digital-native, high-speed user interface focused on security and transparency. The goal is to become Hong Kong’s top choice for banking services while setting global benchmarks for digital banking.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: Hong Kong
Founded: 2019

Recently Posted Jobs

Explore more opportunities at Mox Bank

See more jobs