Role Purpose

Global Enterprise Risk Management (ERM) is a sub function of Group Risk and Compliance. Its purpose is to make sure HSBC is equipped with a coherent Risk Management Framework, Risk Taxonomy and the tools to enable it to understand and operate within its Global Risk Appetite and effectively manage its overall risk position. It seeks to strengthen the risk culture across the organisation through driving consistent risk management practices across our businesses and functions at global, regional and market level. ERM achieves this through robust oversight and stewardship of the end-to-end processes, risks, and controls ensuring it complies with risk, business and regulatory priorities. Enabling the bank to grow safely, be forward looking, and meet its strategic objectives.

The role holder will be accountable for Active Risk Management for ERM activities for all resilience risk types across the Latin America region, based on the Group’s defined approach to proactively identifying, assessing, measuring, reporting on, mitigating and controlling risk exposures associated with HSBC’s businesses and operations at all levels of the organisation, acting as the risk steward for Technology and Cyber risk, Data and Privacy risk, Third Party Risk Management, Business Interruption and Incident Response, Facilities Availability, Safety and Security, Transaction Processing Payments and Change risk. Accountable for the integrity and timely completeness of risk and control identification, assessment and information within the Group’s Risk and Control system of record as well as directing documented remediation plans for residual risks.

Accountabilities

· Acting a local Risk Steward for all appropriate risk types.

· Setting the local approach for ‘Active Risk Management’ (based on Group defined approach) for execution in the region.

· Providing robust challenge and actionable, contextual guidance across all risks both enabling business growth whilst maintaining related risks within appetite.

· Ensuring that Risk appetite measures align to strategic priorities, both local and global.

· Contributing to the design of the Risk taxonomy and framework.

· Monitoring internal and external risk trends and ensures that mitigating strategies and policies are developed.

· Responsibility for the review of internal and external events, providing insight and learnings as necessary.

· Ensuring that the effectiveness of internal control activity is properly monitored.

· Aggregated reporting/analysis of the environment, thematic analysis and read across for appropriate risk types.

· Completing analytical assessments and if required, opining on the control environment of the First Line of Defense (1LOD) within the region for all risk types under scope

· Oversight of appropriate change programs.