Job Description

Third Party Risk and Cloud Governance Manager

Application Deadline: 31 January 2027

Department: Technology-CDSIO

Employment Type: Permanent - Full Time

Location: Hong Kong (SAR)

Description

About Mox

Mox is built by and for the ones who aspire to live life to the fullest – we call them Generation Mox! The name Mox reflects the endless opportunities we can create, - Mobile eXperience; Money eXperience; Money X (multiplier), eXponential growth, eXploration… it’s all up for us to define together.

Why Mox

Everything at Mox – from our products, features, to rewards – is designed based on customer research, tailor made for your needs. We care about what customers care about, especially in data security and privacy. Data ethics is core to everyone here at Mox. Mox rewards you with an array of banking and lifestyle benefits. Who says banking can’t be fun?

Who are we looking for?

Reporting to the Head of Digital Risk and Resilience, this role is responsible for the broad program of managing third party and supply chain risks which impact the bank, the governance of said risk, and for ensuring areas of intersection with other risk types are properly identified and managed. Mox Bank is built on world-class technology service providers and this role plays a critical role in managing these cross-domain supply chain risk, promoting resilience and delivering world class services to our customer.

Responsibilities

As the Senior Third Party Risk Manager/Lead, you will manage one of Mox’s most important integrated risk types and will be responsible for manage third party risks as an aggregate of cyber, technology, operational and compliance risks arising from our use of technology.

• Drive the execution of the Third Party Risk function by collaborating across the 2 lines of defence and with contract owners within a fast-paced technology banking environment in order to
• Engage and collaborate with technology, business, and all lines of defence to ensure that supply chain risk items are appropriately tracked, addressed and maintained in line with the risk management framework and risk appetite.
• Review, track and report on vendor and cloud risk assessments to mitigate supply chain risks to the bank.
• Work close with various contract owners and risk stakeholders to facilitate vendor onboarding and oversee the required due diligence risk assessments.
• Ensure compliance with the Cloud Governance Framework and Third Party Risk Management policies and integrate these cross-disciplinary activities into the broader risk management practices within the Bank.
• Develop and maintain third party risk and control monitoring plans, performing monitoring activities and analysis of evidence to determine controls design and operational effectiveness.
• Cross-skill and work closely with other Risk personnel to wholistically manage overlapping duties or responsibilities such as risk assessments, governance reporting and management of cloud-based risks associated with new Mox solutions.
• Be an agent of change by making risk management relevant to everyone in a clear and succinct manner as we seek to further embed a risk control culture. This may include training delivery and participation in awareness campaigns.
• Be open to change over time as we in turn adopt our strategy to meet ever-changing control and regulatory landscape.

Requirements

5+ years in Technology, supply chain or resiliency Risk management or supply chain risk related positions, including time spent in Risk, Governance, Audit, Technology Risk, Cybersecurity. Ideally, your experience will include time in a consulting or advisory capacity.

We will consider a candidate with more experience in the Lead position.

You should be able to demonstrate:

• Excellent communication skills and the ability to martial human capital to achieve risk objectives.
• Deep understanding of technology risks, especially cloud operations and third party risks.
• Experience in Cyber governance, risk management, operational risk or supply chain risk
• Possess strong interpersonal and communication skills and display initiative to lead discussions with operational staff at all levels, business leaders and colleagues
• Excellent written and verbal communication skills, proactive, interpersonal, and collaborative skills, and the ability to communicate technology risk concepts to technical and nontechnical audiences at various hierarchical
• Strong control mindset and is confident to be the go-to person on 3rd party, technology and resiliency risk matters
• Able to provide effective challenge and recommendations whilst building strong, respectful relationships across different functions
• Ability to lead and motivate the first line risk and technology teams to achieve tactical and strategic goals.
• Thrive in a fast paced, multi-cultural environment where the day to day job varies and lines of responsibility are fluid