Sr Manager - Operational Risk & Business Resilience

About Us:

Allocated Bullion Exchange (ABX)

Allocated Bullion Exchange (ABX) is the world’s leading electronic institutional exchange for allocated physical precious metals. The ABX brings global trading, price discovery, and clearing facilities into one standardised and secure online trading environment via our groundbreaking exchange trading platform, MetalDesk. 

The exchange introduces a new, centrally cleared, transparent, and cost-effective allocated exchange system and standard for the industry by offering precious metal market participants an exchange where they are able to trade, deliver, or store physical precious metal in 7 global locations. ABX gives market participants across the world direct access to one integrated and consolidated global wholesale bullion market. We have enhanced market efficiency, introduced inclusiveness and accessibility, and provided relevant real-time price discovery. 

ABX has Modernised, Globalised & Integrated the precious metal markets by redefining the way physical bullion is traded. We connect all major global liquidity centres and break down the barriers to entry to the global wholesale market for all market participants.

About the Role (Job Description):

The Senior Manager is responsible for the strategic design and execution of the organisation's Operational Risk Management Framework (ORMF) and Business Continuity Management (BCM) program. This role ensures the organisation remains resilient against internal process failures, external events, and technological disruptions while maintaining strict adherence to Bank Negara Malaysia (BNM) policy documents, including RMiT, Operational Risk, and BCM standards.

Key Responsibilities

1. Operational Risk Governance & Oversight

Framework Management: Lead the development and continuous enhancement of the ORMF, ensuring it captures emerging risks in digital banking and financial services.

Risk Identification (RCSA): Direct the annual Risk Control Self-Assessment (RCSA) process across all departments to identify critical control weaknesses.

KRI Monitoring: Establish and monitor Key Risk Indicators (KRI) and trigger levels, providing proactive "Red Flag" reporting to the Board Risk Management Committee (BRMC).

Incident Management: Oversee the operational loss database and lead root cause analysis (RCA) for significant risk events to ensure corrective actions are institutionalised.

2. Business Continuity & Crisis Resilience

BIA & Strategy: Conduct a comprehensive Business Impact Analysis (BIA) to determine RTO/RPO for critical business functions.

BCP/DR Integration: Ensure Business Continuity Plans (BCP) are seamlessly integrated with IT Disaster Recovery (DR) plans, specifically addressing cyber-resilience and ransomware scenarios.

Testing & Validation: Design and lead high-stakes simulation exercises, including "black swan" events, split-site operations, and industry-wide drills.

Crisis Leadership: Serve as the primary coordinator for the Crisis Management Team (CMT), ensuring clear communication channels and rapid decision-making during disruptions.

3. Specialist Risk Coverage

Third-Party & Outsourcing Risk: Assess the operational and continuity risks of material service providers and cloud partners, ensuring they meet the firm’s resilience benchmarks.

Fraud Risk Profiling: Collaborate with the Fraud Risk team to profile merchant and transaction risks from an operational vulnerability perspective.

New Product Approval (NPAP): Act as the risk gatekeeper for new product launches, ensuring all operational and continuity risks are mitigated prior to market entry.

4. Regulatory & Stakeholder Management

Regulatory Liaison: Act as the subject matter expert for BNM engagements regarding Operational Risk and BCM compliance.

Reporting: Present high-quality risk dashboards and resilience maturity reports to Senior Management and the Board.

Culture & Training: Champion a proactive risk culture through organisation-wide training and specialised workshops for "Business Recovery Coordinators."

Requirements:

Experience: 12–15 years in Risk Management within the Financial Services Industry (FSI), with at least 5 years in a senior leadership role.

Education: Bachelor’s degree in finance, Business, Risk Management, or a related field.

Certifications: Professional certification is highly preferred. 

Regulatory Expertise: Deep, working knowledge of BNM RMiT, Policy Document on Operational Risk, and MFRS 17 standards.

Leadership: Proven track record of managing cross-functional teams and influencing C-suite stakeholders during crisis situations.

Technical Proficiency: Familiarity with GRC (Governance, Risk, and Compliance) tools and BCM software.

Strategic Resilience: Ability to anticipate systemic shocks and build "fail-safe" organisational structures.

Analytical Rigour: Strong capability in data-driven risk modelling and trend analysis.

What We Offer:

Flexible working arrangements

Competitive salary

Ongoing professional development

Welcoming and supportive culture

Diverse, global team