Director, Third Party Resilience, Malaysia and Philippines

Job ID: 37539

Location: Bukit Jalil KL, MY

Area of interest: Technology

Job type: Regular Employee

Work style: Office Working

Opening date: 20 Aug 2025

**Job Summary**
- Third Party Resilience forms part of the Group’s overall resilience capability that is centred upon the services supplied by Third Party providers that support the Group’s services. This component to resilience has become increasingly important over the years with the focus that regulators are placing upon firms having approach controls and governance in place to protect their services.
- The role-holder is responsible for supporting to set and maintain Third Party Resilience requirements within the Group’s Resilience Standards as well as ensuring Third-Party Resilience deliverables are managed across the Bank. This includes the provision of leadership over the operational delivery, controls, reporting, and governance of the Third Party Resilience agenda.
- The role-holder will work closely with key stakeholders across TPRM, SCM, Legal, Business and all Resilience Processes, including the Operational Resilience programme to ensure effective delivery of Third Party Resilience activities.

**Strategy**
- Support management of the delivery of processes, and controls of Third Party Resilience, aligned with the Bank’s global strategic direction and with regulatory requirements.
- Lead digitisation and transformation activities to drive the Third-Party Resilience of the Bank, including but not limited to tooling, processes, and continuity management.
- Lead requirement analysis, design functional specifications and get agreement from various stakeholders on the solution and design while complying with existing standards, guidelines and processes.
- Verify that the user requirements are achievable and support business users during UAT and post-implementation phases.
- Work with Project team to produce high quality deliverables.
- Influence Resilience by Design principles across all Third Party initiatives, including with stakeholders from Business and functions.
- Act as Subject Matter Expert on Third Party Risk Management deliverables to influence and improve business understanding of Resilience requirements related to Third Party regulations.
- Responsible for maintenance of Third Party Resilience requirements across various Standards, Guidelines, Procedures.

**Key Responsibilities**

**Business**
- Responsible for the implementation of Group regulations relating Third Party Resilience in support of the Operational Resilience of the Group.
- Lead engagement with Business globally towards implementation of Third Party Resilience requirements, including review and challenge of CIB and WRB Business controls and procedures.
- Develop a framework understand of Third Party dependencies across the Bank’s IBS, together with sound validation practices.

**Processes**
- Drive standardisation of Third-Party Resilience procedures across all disciplines - Ops Res, BCM, CM, OCIR and IT Resilience.
- Provide escalation point on Third Party Resilience matters for stakeholders across Resilience, 2LOD, Business and Functions.

**People & Talent**
- Lead through example and build the appropriate culture in line with the Bank’s values. Set appropriate expectations from supporting team members.
- Set and monitor job descriptions and objectives for direct reports and provide feedback and rewards in line with performance against those responsibilities and objectives.
- Promote new thinking, creative solutions to ensure timely and effective delivery of the programme milestones including management of financial and operational risks.
- Promote lean start-up product development mindset and behaviours at scale.
- Be a self-starter who can initiate and successfully drive programmes and projects to completion with little management supervision.
- Facilitate on-the-job learning from current & previous experience by identifying and communicating transferable lessons, helping to embed these lessons, and encouraging best practice across geographies team.

**Risk Management**
- Monitor, review and challenge the performance of Third Party Resilience controls within Group Resilience Processes, including review and challenge of 1LOD implementation of processes and controls
- Support design and implement new controls and metrics as required, including training to Resilience Risk and governance team for execution.
- Build and maintain an effective risk and control framework to identify and mitigate Third Party Resilience risks inherent to Third-Party processes.
- Define minimum standards of controls and metrics to enable businesses and functions to manage Third Party Resilience risks.
- Drive the assessment of Third Party Resilience within the annual Risk and Control Self Assessments across Resilience Processes.
- Monitor, review and challenge the performance of Third Party Resilience controls within Group Resilience Processes, including review and challenge of 1LOD implementa