HSBC Group

The Risk & Compliance function is a Second line of defence (LOD) function, responsible for reviewing and challenging the activities of the Group’s businesses (also referred to as “the First LOD”) to ensure that they effectively manage as “Risk Owners” the risks inherent in or arising from the conduct of their activities and for which they are responsible. The Second LOD consists of 'Risk Stewards' who are independent of the commercial risk-taking activities undertaken by the First LOD. The Risk & Compliance function is a Risk Steward for a number of non-financial risks in accordance with HSBC Group’s risk framework.

The role holder is also primarily responsible for ensuring that Taiwan adheres to standards for the management of operational risk as set out in the Regional framework for Enterprise Risk and Operational Risk Management, and that Resilience Risks are managed within appetite.

People responsibility: N

Report to: CRO, Taiwan

• Supporting the SVP Enterprise Risk Management in the oversight of Active Risk Management and in the discharge of risk stewardship activities across the resilience risk taxonomy;
• Providing advice and guidance as it relates to the Risk Management Framework (RMF), and provide timely escalation of potential breaches;
• Provide robust challenge and actionable, contextual guidance across all non-financial risks to ensure management of risk within appetite and enablement of business growth and to ensure that risk and control environment is commensurate with the scale and nature of operations;
• Ensure the integrity and timely completeness of risk and control identification, assessment and information within the Group’s Risk and Control system of record (Helios) as well as directing documented remediation plans for residual risks;
• Monitor internal and external risk trends and events, provide insights and learnings, and ensure that mitigating strategies and policies are developed;
• Provide both Operational Risk oversight and robust and timely Risk Steward challenge of the First Line of Defence (1LOD) view of the resilience risk profile as required;
• Provide 2LOD oversight of top and emerging risks, ensuring Taiwan can mitigate these timely and cost effectively;
• In line with building a fungible Risk & Compliance team, other responsibilities and tasks may be required.