The jobholder is responsible for supporting the independent oversight and management of the Bank’s Non-Financial Risk profile—covering operational failures, technology/cyber threats, compliance breaches, ESG factors, and reputational risks. The role assists in ensuring the Bank operates within its Risk Appetite while maintaining resilience against non-financial disruptions through effective risk identification, assessment, monitoring, and reporting.

Responsibilities or duties

• Leads the identification, assessment, and monitoring of risks from internal failures, human errors, and external events.
• Oversees the Risk Control Self-Assessment process, ensuring business units conduct assessments, and challenges the quality of their risk evaluations.
• Investigates loss events and near misses to determine root causes, recommends corrective actions, and maintains a loss event database.
• Reviews IT infrastructure, data security, and vendor risks, collaborating with IT to ensure vulnerabilities are promptly remediated.
• Coordinates the testing of Business Continuity and Disaster Recovery Plans to maintain operations during disruptions.
• Monitors Key Risk Indicators (KRIs), conducts scenario/stress testing, and prepares comprehensive risk reports for management and the Board.
• Identifies reputational threats from operational or conduct-related issues and advises business units on mitigating reputational exposure.
• Ensures adherence to local laws (e.g., BOT) and global standards (e.g., Basel, AML), reviewing new products for compliance and regulatory risks.
• Reviews SOPs and internal controls, recommends improvements, and maintains the operational risk register.
• Promotes risk awareness through training and integrates Environmental, Social, and Governance (ESG) factors into the risk framework.

Qualifications or requirements 

• Bachelor’s degree in Finance, Business, Risk Management, IT, or a related field, with a professional risk certification and minimum 3 years of relevant experience.
• Practical knowledge of risk methodologies (RCSA, KRIs, Scenario Analysis) and Basel II/III operational risk standards.
• Understanding of IT infrastructure, cybersecurity principles, and data privacy regulations.
• Detailed knowledge of local financial services, BOT regulatory requirements, and broader Bank policies.
• Familiarity with ESG frameworks and sustainability reporting standards.
• Strong analytical, mathematical, and data analysis skills, with exceptional MS-Excel proficiency.
• Excellent communication and presentation skills; strong business acumen; organizational ability with prioritization skills; high integrity and accountability; “challenger” mindset to constructively challenge business decisions.

• Leads the identification, assessment, and monitoring of risks from internal failures, human errors, and external events.
• Oversees the Risk Control Self-Assessment process, ensuring business units conduct assessments, and challenges the quality of their risk evaluations.
• Investigates loss events and near misses to determine root causes, recommends corrective actions, and maintains a loss event database.
• Reviews IT infrastructure, data security, and vendor risks, collaborating with IT to ensure vulnerabilities are promptly remediated.
• Coordinates the testing of Business Continuity and Disaster Recovery Plans to maintain operations during disruptions.
• Monitors Key Risk Indicators (KRIs), conducts scenario/stress testing, and prepares comprehensive risk reports for management and the Board.
• Identifies reputational threats from operational or conduct-related issues and advises business units on mitigating reputational exposure.
• Ensures adherence to local laws (e.g., BOT) and global standards (e.g., Basel, AML), reviewing new products for compliance and regulatory risks.
• Reviews SOPs and internal controls, recommends improvements, and maintains the operational risk register.
• Promotes risk awareness through training and integrates Environmental, Social, and Governance (ESG) factors into the risk framework.

• Practical knowledge of risk methodologies (RCSA, KRIs, Scenario Analysis) and Basel II/III operational risk standards.
• Understanding of IT infrastructure, cybersecurity principles, and data privacy regulations.
• Detailed knowledge of local financial services, BOT regulatory requirements, and broader Bank policies.
• Familiarity with ESG frameworks and sustainability reporting standards.
• Strong analytical, mathematical, and data analysis skills, with exceptional MS-Excel proficiency.
• Excellent communication and presentation skills; strong business acumen; organizational ability with prioritization skills; high integrity and accountability; “challenger” mindset to constructively challenge business decisions.

• Bachelor’s degree in Finance, Business, Risk Management, IT, or a related field, with a professional risk certification.