Vice-President - Compliance 2nd Level Controls, Asia Pacific
Responsibilities
The CTL team is positioned as a second line of defense in the bank’s internal control framework and has a specific mandate within Compliance, with the objective to measure, test, detect and report the risk of non-compliance. The responsibilities of the Asia regional team include:
- Collect and analyze compliance risk indicators;
- Contribute to develop a risk based yearly Control plan for APAC;
- Coordinate the annual Compliance Risk Assessment with Regional and Country Advisory Compliance for Asia;
- Execute Compliance reviews covering wholesale bank activities within Asia;
- Understand local regulatory requirements within Asia
- Monitor the control assessment of the Permanent Supervision in Asia; and
- Deliver recommendations and action plan to enhance the global control framework.
Summary of the key purposes of the role
- This is a single contributor role reporting to the Head of APAC Regional 2nd Level Controls. Contribute to the construction of an annual risk-based Compliance control plan for APAC
- Single contributor and part of a team to deliver Compliance reviews in accordance to the annual control plan
- Ensure Compliance risks are identified and managed in a timely manner
- Ensure timely tracking, resolution and closure validation of CPLE CTL recommendations and proposed to Regional APAC Head of 2nd Control testing for closure.
Summary of responsibilities
- Contribute to the annual risk-based Compliance control plan for APAC
- Assist to develop the annual control plan and adopt a strong risk-based approach.
- Assist to analyze the results of the risk assessment campaign, key incidents, external enforcements, results of previous reviews, regulatory agenda and detect weak areas or process at risk. Narrow down the selection of priorities with the contribution of key compliance and business stakeholders across the region.
- Alignment with Group’s instruction on the construction of annual control plan for APAC.
- Collaborate with other regions on planning and priorities alignment for similar risks and/or activities when relevant.
- Discuss and consult all key stakeholders including local Compliance officers of each legal entities covered, Business and Support functions in the region and LOD3.
Single contributor to deliver Compliance reviews in accordance with the annual control plan
- Execute end to end thematic/cyclical/desk review activities by:
o Performing review activities, including scoping, testing, issue clearance, reporting.
o Appropriate scoping of review activities to detect non-compliance and control deficiencies.
o Delivering work on schedule and in accordance with CTL standards and methodology.
o Identify and escalating any risk/issue to the Regional Head of CTL on a timely basis, including where there is a risk of delayed implementation or work
resistance from the relevant stakeholders.
o Prepare 1st level of draft reports and submit for review to the Regional Head of CTL prior to issuance and communication to the relevant business and
Compliance stakeholders.
o Managing distribution of the review report to the relevant stakeholders and the recording of the issues/actions/recommendations in the database.
- Provide periodic updates of the review status in weekly team meetings and update the team’s activity report on a monthly basis. Comment on key risks/issues identified and highlight any potential slippage, and/or provide justification for slippage, if the anticipated delivery schedule is not going to be met.
- Timely tracking of CTL issues/action plans/recommendations and provide updated status in the recording database on a regular basis and escalate before overdue.
- Prepare adequate and accurate working papers to evidence the review execution and support issues/actions/recommendations.
Teamwork
- Collaborate and work with other team members involved in the execution of the reviews, providing support throughout the review life cycle (including the validation of the scoping document, the testing results, the validation/clearance of issues/actions/recommendations, and the issuance of the report).
- Share expertise on compliance and/or business specific knowledge/matters.
- Contribute to heighten awareness of major regulatory developments and its impact to the bank’s activities from a risk management perspective.
- Maintain effective partnership and working relationships with relevant stakeholders at all levels of organization based on an understanding of their concerns, needs and motivations.
Engagement with business line and Compliance stakeholders
- Provide regular updates to key businesses and Compliance stakeholders on the progress of the review and the risks/issues identified during the review period (including proactively participating in business meetings and/or risk committees, if required).
- Maintain updated knowledge of the business line organization as well as its strategic developments and key projects.
Other responsibilities
- Maintain a good understanding and working knowledge of the SFC, HKMA, MAS rules and regulations.
- Maintain own training plan to stay abreast of new regulatory requirements and Internal Controls/Policies.
Other responsibilities apply to the role:
- Comply with all Risk and regulatory obligations where relevant
- Responsibility for ensuring that you are fully aware of and adhere to internal Policies that relate to you, your business or other businesses for which you have any level of responsibility.
- Responsibility for reading, understanding and complying with the Company's Conduct and Standards and corresponding regulations. You will be notified of changes to policies in a timely manner through announcements and/or intranet updates.
Profile required
- A substantial amount of relevant work experience in the financial services industry, specifically in internal audit and internal control and process type testing, is required. A background in compliance is considered a valuable asset. The candidate must currently be functioning in a similar position.
- Experience in execution of projects/reviews with minimum supervision. Ability to identify key issues, understand the root cause and impact/consequences analysis are critical in this role.
- Broad business experience and a proven ability to influence
- Demonstrated ability in strong/effective communication, ability to identify and articulate complex issues. Possess an analytical and people skills
- Proven track record in delivering results, self-starter and ability to manage complex projects is a must
- Experience in analyzing large datasets, draw valid inferences and articulate and present them clearly to key stakeholders
- Work effectively with both local, regional and global stakeholders
- University Graduate in Law, Bank & Finance or Economics
- Professional diploma or qualifications in Compliance (e.g., ACAMS, AAMLP) and/or Audit (e.g., CPA) preferred
- Fluent English: strong verbal and written communication skills and ability to articulate concisely technical matters is essential in this role.
Financial Conduct Authority & Prudential Regulation Authority Conduct Rules
Individual Conduct Rules - All staff covered by Code of Conduct rules are reminded of their obligation to adhere fully to these codes of conduct and failure will be considered as an act of gross misconduct
RULE 1: You must act with integrity
RULE 2: You must act with due skill, care and diligence
RULE 3: You must be open and cooperative with the FCA, the PRA and other regulators
RULE 4: You must pay due regard to the interests of customers and treat them fairly
RULE 5: You must observe proper standards of market conduct
Behavioral Skills
- Team Spirit - Collective mindset: I favour the team’s interest over my own results
- Team Spirit - Synergies: I make cooperation with colleagues in and outside my team a priority
- Innovation - Thinking out of the box/Creativity: I propose new ideas and solutions
- Responsibility - Accountability: I make decisions in my scope of responsibilities
- Responsibility - Risk awareness: I am constantly on the lookout for risks
- Responsibility - Performance: I strive for high performance
Business insight
Our Culture:
At Societe Generale, we live by our 4 core values of commitment, responsibility, team spirit and innovation. We are engaged and demonstrate consideration for others. We act ethically and with courage. We focus our talent and energy on collective success. We experiment and propose new ideas. This way, we maximize our ability to serve client needs and anticipate market changes. Societe Generale is committed to strengthening bonds with colleagues, communities, and the world in which we live, because relationships are at the heart of how we operate. Please visit our APAC career website: https://www.societegenerale.asia/en/careers/building-your-career-with/ for more information.
Diversity, Equity & Inclusion (DE&I):
Our mission: Recruit, develop, advance, and retain a diverse workforce that is united in our efforts to enhance our competitive position and deliver innovative solutions to our clients.
Our vision:
- Engaged workforce that is demographically diverse in a way that reflects the communities in which we operate
- Inclusive culture and workplace that recognizes employees' unique needs and utilizes their diverse talents
- Engage our community and marketplace, and position the organization to meet the needs of all its clients
Check out our DE&I initiatives: https://www.societegenerale.asia/en/careers/diversity-equity-inclusion-dei/
Hybrid Work Environment:
Societe Generale offers a hybrid work arrangement that offers employees the flexibility to work remotely, as well as on-site, in order to promote interaction and collaboration with colleagues while adhering to all SG standard protocols. Hybrid work arrangements vary based on business area. The applicable Business lines will determine and communicate the work arrangements that best meet their business needs.
Department Description
CPLE/CTL’s mandate is to operate, within the 3 Lines of Defence model, a 2nd Level Controls and Testing framework, from both a regulatory and financial crime perspective, based around a robust compliance risk assessment, which drives the prioritization of the control plan.
The objective of 2nd Level Controls and Testing is to assess and test independently the adequacy of the 1st and 2nd Lines of defence (LOD1 & LOD2) compliance framework that Business Units (BU) and Support Units (SU) have put in place to mitigate the risks of non-compliance that SG Group is exposed to across its business activities and operations regionally.