Role Purpose Enterprise Risk Management (ERM) is a sub-function of Group Risk. Its purpose is to make sure HSBC understands, and is in control of its overall risk position, and it also acts as the general steward for non-financial risks. In addition, the function provides resilience risk stewardship to the Regional Businesses and Functions and the entities we operate in. This is achieved through:
• Completing analytical assessments and opining on the control environment of the First Line of Defence (1LOD) within Businesses and Regions
• Constructive challenge to the businesses and functions on their control environment and assessment of risk
• Oversight of emerging risks, strategic business initiatives and local change activity and new/materially changed products
• Analysis of risk exposure across all bank operations and territories to inform capital management and stress testing requirements
• Completing thematic reviews and aggregated reporting of the Non-Financial Risk profile of the bank
• Responsibility for the proper use of a Risk Management Framework (RMF) that sets out governance, policies and practices to proactively identify, assess, measure and report on, mitigate and control operational risk exposures associated with HSBC's businesses and operations for WPB.
Principal Accountabilities and Responsibilities The role holder will have regional responsibility for:
1. Ensuring that WPB in LATAM establishes and adheres to standards for the overall management of its risks, including general responsibility over operational risk and particular responsibility over resilience risk, as set out in the Group's frameworks for Enterprise Risk Management (ERM), Non-financial risk management and Resilience Risk management, and that all are managed within appetite.
· Directs and supports WPB, LATAM, on their operational and resilience risk management and acts as a key contact and escalation for senior stakeholder engagement throughout WPB, LATAM, making sure delivery is consistent and of high quality
· Develops, deploys and embeds the Risk Management Framework (RMF) and provides advice, guidance and challenge
· In relation to ERM Oversight and internal control effectiveness within WPB, LATAM
· Provides 2LOD oversight of top and emerging risks, ensuring WPB, LATAM can mitigate these timely and cost effectively
· Attends WPB, LATAM control meetings and non-financial risk governance forums, providing both Operational Risk oversight and robust and timely Risk Steward challenge of the First Line of Defence (1LOD) view of the resilience risk profile as required
2. Data Risk is a sub function of Resilience Risk. Its purpose is to make sure HSBC understands, and is in control of its data. In addition, the function provides stewardship to the Regional Business and Functions and the entities we operate in.
3. Information Technology and Cybersecurity Risk is also a sub function of Resilience Risk. It provides expert advice on managing the risks to which our technology exposes us, including our cyber exposure.
• Provide technical advice and support to Lines of Business, Functions and entities in Latin America to ensure they understand and are aware of the control environment and assessment of risk at their respective level, commensurate with the scale and nature of operations.
#J-18808-Ljbffr
