Senior Business Analyst | Third Party Risk | Bank
Capco View all jobs
- Hong Kong China
- Permanent
- Full-time
- Experts in banking and payments, capital markets and wealth and asset management
- Deep knowledge in financial services offering, including e.g. Finance, Risk and Compliance, Financial Crime, Core Banking etc.
- Committed to growing our business and hiring the best talent to help us get there
- Focus on maintaining our nimble, agile and entrepreneurial culture
- Act as a Third-Party Risk SME, supporting Third-Party Business Continuity, exit planning, and resilience initiatives across the third-party lifecycle
- Translate business, risk, and regulatory needs into clear BA artefacts including problem statements, scope, and structured requirements
- Lead stakeholder engagement and workshops across Risk, Procurement, Technology, Operations, Cyber, and Resilience teams
- Develop and maintain As-Is and To-Be process maps for third-party risk assessment, BCP testing, and exit strategy processes
- Define and manage a requirements catalogue and user stories supporting control uplift, standardisation, and automation initiatives
- Ensure third-party control gaps and critical supplier risks are accurately captured, mapped, and tracked in Helios to support informed risk decisions
- At least 8+ years experience as a Business Analyst within TPRM, Operational Resilience, or Business Continuity in financial services
- Demonstrated TPR SME knowledge, including third-party BCP testing, exit strategy, supplier criticality, and resilience standards
- Strong understanding of the end-to-end third-party risk lifecycle, including onboarding, assessment, ongoing monitoring, and remediation
- Experience working with cybersecurity risk and control gaps, including tolerance tracking and remediation management
- Ability to produce high-quality BA documentation (process maps, user stories, requirements catalogues) and facilitate complex workshops
- Strong stakeholder management skills, with experience collaborating across 1LOD, 2LOD, Procurement, Technology, and Risk functions
- Immediately Available Preferred