Specialist, Data and AI Risk, VP

Principal Responsibilities

• Establish and Implement Risk Management Framework: Develop and maintain a comprehensive risk management framework for Data and AI initiatives across the bank, ensuring alignment with regulatory requirements and industry best practices. This includes identifying, assessing, mitigating, and monitoring risks related to data governance, data security, data architecture, AI governance, algorithmic bias, and AI explainability. Contribute to the development and implementation of the bank's overall risk appetite for Data and AI.
• Establish Policy: Develop and implement Data and AI Risk Management Policies and Standards including localization of Group Polices/Standards
• Operationalize Line 2 oversight for Data Governance and AI: Collaborate closely with Data Management Team, Business Units and Support Units (Bus/SUs), Technology related units to embed risk considerations into the Data and AI lifecycle. Perform Line 2 advisory support and oversight to Line 1 BU/SUs to address Data and AI related queries/ concerns in their initiatives and processes.
• Conduct Risk Reporting and Analysis: Prepare and present regular reports to senior management on Data and AI risk issues and mitigation strategies.
• Provide Risk Advisory: Participate in the assessment of new Data and AI initiatives, providing risk-based recommendations and challenging proposals to ensure appropriate controls are in place before deployment.
• Risk Management Monitoring Tools and Methodologies: Conduct regular risk assessments and reviews of existing Data and AI systems and processes, identifying vulnerabilities and recommending improvements to strengthen controls and reduce risk. Including reviews of data quality monitoring processes, assessment of data KRIs to ensure potential risks are addressed.
• Drive Industry/Regulatory Alignment and Best Practices: Participate in industry forums and share best practices to stay abreast of emerging trends in Data and AI risk management. Maintain a strong understanding of emerging Data and AI risks and regulatory developments, proactively identifying and addressing potential threats.

Education and Relevant Experience

• 10+ years of experience in risk management, with strong experience in Data and/or AI risk or governance, potentially through a specific risk discipline (e.g. third-party risk, model risk, technology risk, etc.)
• Proven experience in developing and implementing risk management frameworks and methodologies.
• Strong knowledge of China regulations and industry best practices related to Data and AI risk, and model risk management frameworks.
• Experience in Applied Machine Learnings Techniques will be favored.  

• Technical Competencies：Refer to relevant experiences.

• Core Competencies:

  • Communication & Interpersonal Skills: Possess strong presentation and interpersonal skills, with the proven ability to effectively engage and collaborate with individuals at all organizational levels.
  • Written & Oral Communication: Demonstrate excellent written and oral communication abilities, with the ability to effectively communicate complex technical information to both technical and non-technical audiences.
  • Strong analytical and problem-solving skills, with the ability to identify and assess risks effectively.

• Work Relationship:

  • Collaborative Spirit: Ability to effectively collaborate with business and support units in the successful rollout of various risk management processes and tools.
  • Teamwork & Professionalism: A strong team player, capable of working independently professionally with both immediate team members and cross-functional workgroups.

• Education and Professional Qualification:

  • Education: Bachelor's degree in a relevant field (e.g., Accounting, Banking, Computer Science, Engineering, Mathematics, Statistics).
  • Relevant certifications such as CRISC (Certification on Risk and Information Systems Control), CISM (Certified Information Security Manager), or other related certifications are preferred.
            

Location:

PRC - Shanghai

Job:

Technology

Schedule:

Regular

Employee Status:

Full time