Operations Business Risk and Controls (OBRC) function manages core business risk and control activities, including Risk and Control Self-Assessments (RCSA), control testing, and quality assurance. Additionally, it serves as a second-line capability by defining policies, procedures, and methodologies for Operational Resilience and Third-Party Risk Management (TPRM). As a Associate - Operational Resilience, you will support the enhancement of the Bank’s resilience framework by validating continuity structures and providing assurance on protective environment. You will assist in conducting the annual cycle of Operational resilience, Business Continuity Management (BCM) and crisis management activities. You will work with different business stakeholders to ensure Business Continuity Plans (BCPs) and Impact Tolerances (ITOLs) are practical, effective and aligned with regulatory and Operational Resilience requirements, including lessons learned, assurance testing and third-party risk activities. This is a full-time permanent position.
Key responsibilities
-
Facilitate the identification of Important Business Services (IBS), manage impact tolerance mapping and execute related control assurance activities tied to the validation of contingency plans and crisis playbooks
-
Coordinate and guide business lines through the completion of their Business Impact Analyses (BIAs) and Risk Assessments, ensuring all BCPs are up to date and formally validated
-
Partner closely with specialists across all core resilience pillars, including Information Security, IT Risk, Data Privacy, Third-Party Risk Management (TPRM), HR and Facilities Management to streamline underlying dependency mapping and delivering integrated testing assurance
-
Analyse and map operational resilience metrics against the Bank's approved Risk Appetite Statement (RAS) and Key Risk Indicators (KRIs), ensuring that impact tolerances and recovery strategies remain strictly aligned with the Bank's boundary limits
-
Conduct deep risk assurance analysis, integrating lessons learned from severe but plausible scenario testing directly into the Risk and Control Self-Assessment (RCSA) framework to enhance predictive resilience metrics
-
Actively contribute to the Operational Resilience and BCM framework uplift programme, assisting in driving structural enhancements across policies, methodologies, and governance structures
-
Support the functional design, enhancement and customisation of the Bank's internal resilience, BCM and incident management software tools
-
Produce departmental reporting dashboards and packs prior to submission to the Head of Department, Executive Management, Regulators, Audit and Risk, ensuring data accuracy and corporate governance compliance
-
Draft comprehensive, analytical Post-Incident Reviews (PIRs) and testing summary reports, ensuring all identified capability gaps and resource shortfalls are captured for remediation tracking
-
Partner with stakeholders across business lines and technology pillars to enhance organizational readiness, promoting active framework ownership and an embedded risk-aware culture across business services
-
Support with preparation of governance packs across different committees
Requirements
-
Degree educated in Risk Management, Business Administration, Computer Science, Finance, or other relevant subject
-
Demonstrated experience in operational resilience, business continuity, crisis management, risk within Financial Services
-
Experience in DORA is preferred
-
Proven track record in facilitating IBS and ITOL assessments, BIAs, documenting dependency mapping across critical assets (people, process, technology, facilities, third parties), and supporting scenario testing
-
Demonstrated non-financial risk experience within a regulated Financial Services or Banking environment, with specialised exposure to Technology Risk, Information Security and TPRM
-
Excellent understanding of UK regulatory landscape for Operational Resilience, including the Bank of England, PRA, and FCA policy frameworks, alongside established BCM standards (e.g. ISO 22301)
-
Excellent communication and interpersonal skills with ability to form effective relationships at different levels
-
Fluency in Mandarin is a plus, but not mandatory
-
Excellent analytical and stakeholder management skills
-
Proficient in MS Office (Word, Excel, PowerPoint, Visio)
Having a presence in the UK for more than 90 years, Bank of China London Branch has been providing an excellent financial service to the market and maintain its competitive edge as an international bank operated in the UK. It has employees in over 33 countries, and it is one of the most internationalised overseas branch in the Bank of China Group. The Bank values the diversity of its employees and aims to create an inclusive environment where everyone can speak up and enjoy the equal opportunities to grow both personally and professionally.
