Head of Risk Management (CRO)

The Head of Risk Management is responsible for leading the Risk Management Department and establishing, maintaining, and continuously enhancing the Company’s enterprise-wide risk management framework.

The role ensures that all material risks are effectively identified, assessed, monitored, controlled, and reported in a timely manner. It also provides independent risk oversight and advice to the Board of Directors and the Chief Executive Officer.

The Head of Risk Management is accountable for ensuring that the Company’s risk profile remains within the approved risk appetite and risk limits, in alignment with Group risk management principles, internal governance requirements, and applicable laws and regulations.

• Develop the Department’s organizational structure, workforce plan, and resource allocation.
  
• Establish departmental action plans and KPIs and oversee their implementation.
  
• Develop job descriptions, operating guidelines, and task assignments for positions within the Department.
  
• Provide professional guidance, training, coaching, and development for team members.
  
• Establish, review, and improve the Department’s governance model, operating regulations, and internal processes.
  

• Establish and continuously enhance the Enterprise Risk Management Framework based on the Three Lines of Defense model.
  
• Develop and update risk management policies, regulations, procedures, standards, and guidelines.
  
• Establish the Company’s risk appetite, risk limits, early-warning thresholds, escalation mechanisms, and breach-management processes.
  
• Coordinate with Group Risk functions to ensure consistent risk management practices across the organization.
  
• Promote a strong risk culture through training, communication, and risk-awareness initiatives.
  

• Develop methodologies, standards, and tools for identifying, measuring, and assessing material risks.
  
• Develop and maintain risk models, Key Risk Indicators, scenario analysis, stress-testing methodologies, risk limits, and early-warning mechanisms.
  
• Lead independent risk assessments of:
  
  • Business strategies;
    
  • Investment proposals;
    
  • New products;
    
  • Material transactions;
    
  • Exception requests.
    
• Provide independent risk opinions and recommendations to the Board of Directors, the CEO, and senior management.
  
• Conduct thematic, ad hoc, and emerging-risk assessments and recommend appropriate risk treatments and control enhancements.
  

• Independently oversee material risks arising from the Company’s business activities.
  
• Monitor the utilization of the approved risk appetite and risk limits.
  
• Oversee risks associated with proprietary trading, margin lending, bond investments, and other key securities activities.
  
• Monitor market developments, macroeconomic conditions, regulatory changes, and emerging risks.
  
• Escalate and report significant risks, risk events, limit breaches, and unusual developments in a timely manner.
  
• Periodically assess the effectiveness of the Company’s risk management framework, governance arrangements, and risk management processes.
  
• Recommend enhancements to the Board of Directors and senior management where necessary.
  

• Bachelor’s or Master’s degree in Economics, Finance, Banking, Securities, Statistics, Financial Mathematics, Econometrics, Risk Management, or a related field.
  
• Possession of a valid Securities Practicing Certificate.
  
• Certifications in securities analysis or fund management are preferred.
  
• CFA, FRM, ACCA, or other internationally recognized finance or risk management certifications are considered an advantage.
  

• At least 10 years of experience in securities, banking, or other financial services.
  
• At least 3–5 years of management experience within the risk management function of a securities company.
  
• Strong practical experience in capital markets, proprietary trading, equity and bond investments, and margin lending.
  

• In-depth understanding of securities company operations and their associated risks.
  
• Strong specialist knowledge of margin-lending risk management, early-warning systems, and stress testing.
  
• Sound understanding of laws, regulations, and regulatory requirements applicable to securities companies and capital markets.
  
• Strong knowledge of enterprise risk management principles, the Three Lines of Defense model, risk appetite, risk limits, risk taxonomy, escalation mechanisms, and risk reporting.
  
• Solid understanding of market, credit, liquidity, operational, technology, cybersecurity, third-party, compliance, and reputational risks.
  

• Strategic leadership and organizational management capabilities.
  
• Ability to provide independent risk advice to the Board of Directors, the CEO, and senior management.
  
• Strong strategic, analytical, and critical-thinking skills.
  
• Ability to assess complex risk matters and balance risk-management requirements with business objectives.
  
• Strong stakeholder-management, influencing, and negotiation skills.
  
• Effective communication, reporting, and presentation skills, particularly when presenting complex risk matters to senior executives and governance bodies.
  
• Strong people-management, coaching, and talent-development capabilities.
  
• Professional working proficiency in English, including the ability to prepare reports and presentations.
  

• High levels of integrity, independence, and objectivity.
  
• Strong accountability and ownership of responsibilities and outcomes.
  
• Ability to work effectively within a matrix reporting and Group governance structure.
  
• Resilience, adaptability, and the ability to perform under pressure.
  
• Proactive response to changes in business conditions, financial markets, and regulatory requirements.
  
• Strong learning agility and a continuous-improvement mindset.
  
• Commitment to long-term employment with the Company.
  

• Enterprise Risk Management Framework and other material-risk management frameworks.
  
• Risk Appetite Statement and risk-limit framework.
  
• Risk management policies, regulations, procedures, standards, and guidelines.
  
• Independent risk assessments and advisory opinions for management and governance bodies.
  
• Risk profile, risk-limit compliance, early-warning, and portfolio-analysis reports.
  
• Risk alerts, escalation reports, and reports on significant risk events.
  
• Risk culture and risk capability development programs.
  
• Recommendations for improving the Company’s risk controls, governance arrangements, and risk management framework.