Operational Risk

**Responsibilities**

For the scope of Corporate Banking Operations, Global Market Operations, Client Engagement & Protection and Credit Operations, the role of the Head of **Operational Risk & Permanent Control (OPC) Competency Center staff within the first line of defense is responsible for the implementation of the Operational Permanent Control framework,** covering the identification, the measurement and the management of Operational Risks.

**Direct Responsibilities**

For the performance of its mission, the OPC staff will:

- Comply with the regulatory obligations of company, with General Management instructions and with market best practices;
- Act under the oversight of the independent second level of defense Functions, namely Risk ORM and Compliance.

Under the responsibility of the Head of ITO Conduct & Control for APAC & Company OPC Manager, and in collaboration with the Corporate Banking Operations, Global Market Operations, Client Engagement & Protection and Credit Operations OPC team as well as Territories OPC teams, the key responsibilities are to:
Directly supervises the staff forming the Operation Permanent Control, defining responsibilities, objectives, assessing performance, providing guidance and support.

Coordinate the work of the team members in the realization of the control plan for the Corporate Banking Operations, Global Market Operations, Client Engagement & Protection and Credit Operations

Provide support to all APAC countries OPC

Make sure the OPC control plan in the region is constantly updated, appropriately enforced

Contribute to the realization of the control plan

**Implementation of Operational Risk Management**
- Contribute to the proposal of remedial action plans to address control findings in discussion with action implementation owner and relevant functions and follow up on their implementation
- **Assist in coordinating investigations / missions / inquiries from internal audit, regulators, or 2LOD**
- **Participate in permanent control committees (ORMF, PCC), Contribute and participate in monthly meeting with Territory OPC to review the results of controls **for each territory and contribute to committee materials that provides accurate and meaningful data on operational risk management framework
- Duty to alert on significant failures to operational management and Risk ORM and promote operational risk monitoring and control culture.
- Participate on ad hoc basis to projects such as those led by Head of ITO Conduct & Control
- Facilitates/provides refresher trainings to the teams to enhance awareness on operational risk management topics.
- Ensure operational risk incidents highlighted by the OPC controls are properly collected, coordinate the root cause analysis and contribute to the definition of remedial actions.
- Perform Deep Dive analysis/ thematic review on specific processes based on identified risk areas

**Contributing Responsibilities**
- **Perform OPC control testing over Corporate Banking Operations, Global Market Operations, Client Engagement & Protection and Credit Operations in APAC Territories.**
- Execution of the controls as per the definition;
- Report control results in ORUS tool;
- Escalate any anomaly ahead of the deadline;
- Report the control result;
- Set action plans for remediation with stakeholders;
- Monitor the action plans completion;
- Propose enhancement of controls description / checkpoints when identified.
- Monitor and report for the activities under his/her scope and for APAC countries:

- Status of implementation of audit findings/recommendations assigned
- **Status of deployment of Risk Control & Self Assessment** (RCSA)
- Status of deployment of Generic Control Plan (GCP)
- Status of team procedures in all APAC countries
- Consolidate monitoring and analysis of historical incidents and related action plans, including the validation of the incidents by Business COO / Business Manager.
- Manage Operational Risk Historical Incidents (Long Term)
- Create Historical Incident in Risk 360 tool when the teams supported are Identification Party. Liaise with the team where the incident was identify to understand the incident and provide a concise description of the incident.
- Check & Challenge the incidents description for which the teams supported are Impacted Party, ensure it is complete, clear, concise and can be understood by the validator (incident report should highlight the root cause(s) of the incident and the immediate remediation action as well as longer term remediation when relevant).
- **When requested, provide administrative support for the coordination of New Activity Committee (NAC) & Transaction Approval Committee (TAC) process.