Position Purpose:
This position exists to support the roles and responsibilities of CRO.
The role contributes to ensuring that the local risk management framework remains robust, independent, effective and aligned with both Group standards and local regulatory requirements, including Bank Negara Malaysia expectations on an independent second line risk and control function
The role is designed to provide broad support to the CRO on all risk management matters, not limited to the preparation of Board or management committee materials. This includes supporting the assessment of the Malaysia entities’ risk profile, monitoring key risk indicators and risk appetite metrics, coordinating risk reporting and escalation, contributing to stress testing and ICAAP-related exercises, supporting policy and framework reviews, and assisting the CRO on ad hoc or emerging risk topics as required.
The RISK Manager is expected to work closely with relevant local stakeholders, regional RISK teams, business lines, Compliance, Finance, Legal and other control functions to support effective risk oversight, promote prudent risk culture, and contribute to a coherent and forward-looking view of Malaysia’s risks, challenges and priorities.
Responsibilities
Direct Responsibilities
- A. Support to the Chief Risk Officer of Malaysia
- Support the CRO Malaysia in the oversight of all risk management activities across Malaysia entities, including credit risk, market risk, liquidity risk, operational risk, ESG-related risk considerations and other relevant risk topics.
- Assist CRO and ORM teams on operational risk management activities including assessments and investigations
- Assist the CRO in maintaining a coherent and holistic view of Malaysia’s activities, risks, emerging issues and risk management priorities
- Support the CRO in identifying, assessing, monitoring and escalating material changes in the risk profile, including any trends, initiatives or developments that may affect the local risk appetite or risk governance framework.
- Provide analytical support and risk insights to the CRO on any risk management topic, including ad hoc requests, new regulatory requirements, risk reviews, internal control matters, audit findings, risk appetite limit excesses, new products, new activities or material transactions.
B. Conduct Risk Analysis, Monitoring and Reporting
- Perform risk-related assessments and exercises, including identifying, measuring, analyzing and monitoring key risks across the organization.
- Monitor the risk profile of Malaysia entities and prepare relevant analysis to support effective risk oversight by the CRO, management and Board-level committees
- Prepare and coordinate local risk reporting for management and Board committees, including but not limited to the Executive Risk Committee, Board Risk Management Committee and Board of Directors.
- Ensure the quality, accuracy, timeliness and consistency of risk reports, including risk profile updates, risk appetite monitoring, stress testing outputs, ICAAP-related information and other relevant management information.
- Liaise with regional RISK teams, local stakeholders and relevant functions to collect, validate and consolidate risk information required for reporting and oversight
- Support the CRO in escalation processes, including updates to CRO SEA, CRO APAC, regional risk experts, management and the Board on risk appetite breaches, regulatory findings, internal governance issues or material risk events
C. Support Risk Management Framework, Policies and Governance
- Support the CRO in the maintenance and enhancement of Malaysia’s risk management framework, including policies, procedures, risk appetite framework, risk governance processes and control arrangements.
- Contribute to the review and update of local risk-related policies and procedures to ensure alignment with Group requirements, regulatory expectations and local business needs.
- Assist in the review of Risk Appetite Statement, risk metrics, credit strategy, independent credit review processes and related materials for CRO review and management or Board approval.
- Support governance committees by preparing analysis, materials and follow-up actions for risk-related discussions, including Executive Risk Committee, Board Risk Management Committee and other relevant management committees.
- Assist the CRO in promoting sound risk culture and prudent risk-taking, including through check-and-challenge on new products, activities or transactions to be undertaken by the Bank.
D. Participate in Stress Testing, ICAAP and Risk Exercises
- Support stress testing exercises, including research, data collection, scenario analysis, coordination with stakeholders and preparation of related outputs.
- Contribute to the ICAAP exercise by supporting data collection, analysis, documentation and preparation of materials required for management and Board review.
- Assist in monitoring projected capital management, internal capital target ratio considerations and related risk analysis where relevant to committee discussions.
- Support other risk-related reviews or exercises, including permanent control framework activities, independent credit reviews and any other reviews required by the Bank, Group or regulators.
F. Coordination, Stakeholder Engagement and Risk Culture
- Maintain constructive working relationships with business lines, local stakeholders, control functions, regional RISK teams and other relevant parties to support effective risk management and oversight.
- Facilitate transversal cooperation and information flow between Malaysia RISK, regional RISK teams and relevant local functions.
- Contribute to the promotion of a strong risk culture, risk awareness and effective second line of defense role within the Malaysia platform.
- Support risk initiatives, projects and transformation topics relevant to Malaysia RISK, including process improvements, reporting enhancements, governance improvements and other priorities defined by the CRO.
G. Permanent Control Responsibilities
- Contribute to BNP Paribas’ operational permanent control framework and support the implementation of operational permanent control policies and procedures in day-to-day risk management activities.
- Support compliance with regulatory requirements, internal guidelines and control procedures relevant to the RISK function.
- Support timely incident reporting, action plan follow-up and resolution of audit or control recommendations within agreed timelines.
Contributing Responsibilities
Technical & Behavioral Competencies
- Technical Competencies
- Strong understanding of risk management principles, including the ability to identify, analyse, measure, monitor and report risks across the organisation.
- Good understanding of credit risk, market risk, counterparty risk, liquidity risk and operational risk
- Knowledge of risk governance, risk appetite, stress testing, ICAAP, risk reporting, internal controls and regulatory expectations applicable to banking institutions in Malaysia.
- Ability to prepare high-quality risk analysis and management information for senior management, Board committees and governance forums.
- Ability to support policy review, procedure updates, risk framework maintenance and implementation of Group or regulatory requirements.
Behavioural Competencies
- Strong analytical ability, with the capacity to identify relevant issues, assess risk implications and construct meaningful recommendations.
- Sound judgement and decision-making ability, including the capacity to escalate material matters appropriately.
- Strong communication skills, both written and oral, with the ability to express risk views clearly, effectively and with appropriate impact across different levels of stakeholders.
- Ability to collaborate and work transversally with business lines, RISK streams, regional teams and control functions.
- Attention to detail, rigor and organizational discipline, including the ability to priorities actions, coordinate activities and monitor progress effectively.
- Ability to anticipate business, strategic and regulatory developments and understand their potential impact on the local risk profile.
- Personal impact and ability to influence stakeholders constructively while maintaining independence and professional challenge as part of the second line of defense.
Specific Qualifications:
- Degree in relevant fields and minimum 5-10 years relevant experience in risk management functions.
- Familiar with local regulatory requirements
