Assistant Director – Enterprise Risk Management (Operational Risk)

JOB SUMMARY

The Singapore Operational Risk Management (ORM) lead is responsible for providing independent second line oversight of operational and non‑financial risks for the Eastspring Singapore and Hong Kong entities. The role leads the Singapore Operational Risk team to ensure that the operational risk management practices are robust, proportionate, and aligned with required risk frameworks, regulatory expectations, and the firm’s risk appetite.

The responsibility also includes the organisation and coordination of the ISAE 3402 audits conducted annually.

1. Operational Risk Oversight

• Provide independent second line oversight of operational and non‑financial risks across the Singapore entity in accordance with Prudential ORM policies, standards, and local regulatory requirements.
• Oversee the execution and quality of core ORM activities, including risk and control self‑assessments (RCSA), operational incident management, root cause analysis, issues remediation tracking and KRI monitoring.
• Review and challenge the design and effectiveness of key controls, ensuring that material risks are appropriately identified, assessed, and mitigated.
• Monitor risk trends, emerging risks, and control weaknesses, with timely escalation of material issues to senior management and relevant governance forums.
• Take up responsibility as the operational risk MIC for Hong Kong.

1. ISAE Audit Oversight and Coordination

• Serve as the second line lead responsible for end-to-end coordination of ISAE (e.g. ISAE 3402) audits for the Singapore entity.
• Coordinate across first line process owners, internal stakeholders and external auditors to ensure timely, complete, and high-quality delivery of ISAE audit engagements.
• Provide independent oversight and challenge on the scope definition, control descriptions, control design and operating effectiveness relevant to ISAE reports.
• Review and challenge audit observations, management responses, and remediation plans to ensure issues are appropriately addressed and tracked to closure.
• Ensure ISAE outcomes, key control themes, and material findings are appropriately escalated and reported to management and relevant governance committees.
• Drive continuous improvement by leveraging ISAE findings to strengthen the control environment and reduce recurring audit issues.

1. Governance, Reporting and Regulatory Engagement

• Ensure timely and accurate preparation of operational risk reporting for management committees, risk committees, and Board-level forums, including Business Control Reports and risk dashboards for Singapore and Hong Kong.
• Support regulatory interactions and supervisory reviews as required by providing clear articulation of the operational risk framework, key risk exposures, and remediation actions.
• Ensure alignment between Singapore ORM practices and Prudential-wide risk governance expectations, while addressing local regulatory and business nuances.

1. Stakeholder Partnership and Risk Advisory

• Act as a trusted risk advisory partner to senior management and first line functions, providing independent challenge and pragmatic guidance on operational risk matters.
• Provide risk input and challenge on new initiatives, change programmes, outsourcing arrangements, and material business decisions from an operational risk perspective.
• Work closely with other second line functions (e.g. Compliance, Investment Risk, Technology Risk) to ensure coherent and coordinated risk oversight.

1. Risk Culture and Continuous Improvement

• Promote a strong risk culture by reinforcing accountability, risk ownership, and disciplined execution of risk management practices across the business.
• Drive continuous improvement in operational risk processes, tools, and reporting, including the effective use of risk systems and data.
• Contribute to Prudential and Eastspring risk initiatives, projects, and framework enhancements as required.

1. People and Team Leadership

• Lead and develop the Singapore / Hong Kong ORM team, ensuring clear accountability, appropriate capability, and effective resource deployment.
• Provide coaching and guidance to team members to build technical risk capability and judgement.

• Extensive experience in Enterprise or Operational Risk Management within a regulated financial services firm, preferably in asset management or wealth management with a global presence.
• Strong of understanding of operational risk frameworks, non-financial risk management practices, and governance expectations in Singapore and Hong Kong.
• Experience overseeing or coordinating independent assurance engagements (e.g. ISAE 3402, internal audit, or equivalent), with a strong understanding of control design, operating effectiveness, and remediation management.
• Demonstrated ability to provide effective independent challenge at senior management and committee level.
• Strong judgement, analytical capability, and ability to translate risk insights into clear, actionable messages.
• Proven stakeholder management skills, with the ability to balance robust challenge and constructive partnership.
• Experience in leading teams and managing complex risk issues across multiple stakeholders is preferred.