Assistant Vice President - Resilience Risk

• Act as the CIB coordinator and a primary point of contact for Third-Party Risk (TPR) matters, ensuring clear ownership, timely responses, and consistent engagement with stakeholders.
• The Third-Party Risk Officer (TPRO) is a key member of the Resilience Risk function within CIB Business Risk, acting as the coordinator and one of the primary points of contact for Third-Party Risk (TPR) matters across CIB.

• The role’s purpose is to ensure third-party governance and oversight responsibilities are consistently coordinated and delivered effectively, supporting strong risk outcomes and regulatory compliance.
• With elements of the Business Information Risk Office (BIRO), the role also supports information, technology, and cyber risk management by providing timely, high-quality guidance to business stakeholders.
• This includes translating complex technical and security assessments into clear, actionable insights, serving as a point of expertise in information security and cyber risk, and helping ensure the business remains aware of and prepared to manage evolving threats and control expectations.

• Coordinate and oversee delivery of CIB third-party governance and oversight activities, ensuring they’re completed accurately, on time, and to required standards.
• Provide subject matter expertise and practical risk management support on TPR across CIB, advising on expectations, controls, and good practice. Develop and drive a strategy and plan to achieve compliance with the Group Third-Party Risk policy (GB/GI), tracking progress and addressing gaps.
• Monitor adherence to TPR requirements, identify issues or discrepancies, and escalate appropriately through agreed governance channels. Embed TPR into business-as-usual processes, acting as an agent for change to improve consistency, awareness, and risk culture across functions/regions.
• Produce clear management information (MI) and report on TPR status, key risks, issues, and remediation progress to support effective decision-making. Support effective stakeholder management across CIB, partnering with procurement, vendor management, risk, compliance, and business teams to drive outcomes.
• Provide timely, high-quality guidance on information, technology, and cyber risks relevant to the business and its third parties. Translate complex technical/security assessments into clear, actionable insights for business stakeholders across regions.

• Minimum 8-10 years of experience in Third-Party Risk Management (TPRM) regulatory framework and related governance expectations.
• Ability to communicate complex and sensitive issues confidently and concisely, using clear, simple language suitable for globally distributed stakeholders.
• Outstanding relationship management, collaboration, and influencing skills, with the ability to work effectively across functions and regions.
• Strong judgement and decision-making capability, making considered and timely decisions, particularly under pressure.
• Confidence to challenge constructively, including making decisions that may be contrary to business preferences, and the ability to prioritize competing demands.
• Demonstrable experience in risk management within a global organization, with specific experience in Third-Party Risk / Third-Party Risk Management (TPR/TPRM).
• Working knowledge of relevant TPRM regulatory expectations and governance frameworks.
• Strong stakeholder management skills, with the ability to build effective relationships and influence outcomes across business, procurement, risk, compliance, and audit teams.
• Strong stakeholder management skills, with the ability to build effective relationships and influence outcomes across business, procurement, risk, compliance, and audit teams.

HSBC