Risk and Controls Manager

The Risk & Control Manager within the CLD Controls Office is responsible for overseeing and ensuring the end-to-end control environment is operating as intended throughout the client lifecycle across APAC CLD.

Core responsibilities include:
Inspection
• Oversee regulatory inspections, internal and external audits, and Compliance testing programs relating to APAC CLD
• Manage tracking and delivery of inspection recommendations, ensuring stakeholders are informed and commitments are completed on time
• Evaluate inspection findings and recommendations and implement new or enhanced controls to strengthen operational processes and reporting

Controls - Core
• Identify key risks and optimize controls through BAU escalations and periodic review programs such as RCSA and COMPASS
• Identify and remediate control gaps, lead operational error remediation, and partner with stakeholders to agree root causes and appropriate corrective actionsMonitor control effectiveness and enhance the control framework as it matures
• Partner with CLD production managers to establish and drive control meetings that effectively address operating risk
• Represent CLD interests in control‑ or regulatory‑driven initiatives

Controls - Permanent Supervision & Quality Assurance
• Oversee and perform Permanent Supervision and Quality Assurance on post‑production client KYC files
• Ensure tested samples meet local and global quality requirements
• Identify learning points from each PS cycle and integrate them into training and knowledge management programs, including monthly quality forums
• Identify weaknesses in the PS framework and implement corrective actions to drive continuous improvement

Change Management
• Interpret Compliance policies and internal guidance and facilitate discussions with Compliance and CLD Norms & Experts to support KYC analysis and controls
• Build strong knowledge across the full client lifecycle including sales initiation, onboarding, refreshes, and offboarding
• Update procedures, knowledge logs, training materials, and tools based on changes in policies, internal guidance, or inspection findings
• Define a robust framework to manage procedural changes and ensure they are effectively embedded and communicated within CLD
• Design a knowledge management framework to disseminate information through bulletins, new‑hire training, refresher courses, and targeted training sessions.

Technical and Competency Skills:

• Practical knowledge of AML/CFT and non‑financial crime regulations (e.g. US, FCA, HKMA, MAS, FATCA, OECD), gained through experience in client onboarding/KYC, Compliance, controls, or audit
• Strong attention to detail with an open and investigative mindset, able to identify issues both at a high level and in depth
• Strong team player with excellent communication, partnering, and influencing skills
• Good organisational skills, with the ability to work in a dynamic and high‑pressure environment while managing competing priorities
• Highly motivated self‑starter, eager to learn and willing to work on a variety of assignments
• Demonstrated ability to think innovatively and challenge the status quo
• Able to communicate risks and issues proactively and escalate blocking points to management with proposed mitigation plans
• (Optional) CAMS certified or equivalent.

BEHAVIORAL SKILLS:

• Client - Risk: I strive to satisfy clients while taking into account risks for the company
• Team Spirit - Synergies: I make cooperation with colleagues in and outside my team a priority
• Innovation - Simplification: I make things & ideas simple 
• Responsibility - Accountability: I make decisions in my scope of responsibilities
• Commitment - Sustainability: I strive to develop my skills and knowledge.
   

OUR CULTURE: 
At Societe Generale, we live by our 4 core values of commitment, responsibility, team spirit and innovation. We are engaged and demonstrate consideration for others. We act ethically and with courage. We focus our talent and energy on collective success. We experiment and propose new ideas. This way, we maximize our ability to serve client needs and anticipate market changes. Societe Generale is committed to strengthening bonds with colleagues, communities, and the world in which we live, because relationships are at the heart of how we operate. Please visit our APAC career website: https://www.societegenerale.asia/en/careers/building-your-career-with/ for more information.

DIVERSITY, EQUITY & INCLUSION (DE&I):
Our mission: Recruit, develop, advance, and retain a diverse workforce that is united in our efforts to enhance our competitive position and deliver innovative solutions to our clients.
Our vision: 
• Engaged workforce that is demographically diverse in a way that reflects the communities in which we operate
• Inclusive culture and workplace that recognizes employees' unique needs and utilizes their diverse talents 
• Engage our community and marketplace, and position the organization to meet the needs of all its clients
Check out our DE&I initiatives: https://www.societegenerale.asia/en/careers/diversity-equity-inclusion-dei/

Department Description

The Client Lifecycle & Digital Department (CLD) is part of the Wholesale Clients Technology & Operations division within Global Banking Technology & Operations (GBTO).

CLD delivers a state-of-the-art digital platform supporting users and clients across pre-trade, execution, and post-trade activities. Our goal is to enhance client knowledge, provide a seamless user experience throughout the client lifecycle, and mitigate risk to protect the bank.

Teams within CLD:

• New Business Onboarding: Manages and completes all new client onboarding activities
• Existing Client Management: Handles KYC reviews, including periodic reviews, trigger events, and remediation
• CLD Controls Office: Oversees operational risk and controls, audit inspections, regulatory change management (AML and non-AML), training, procedures, client/regulatory data, and quality assurance
• Client Experience Management: Provides bespoke service to key clients and acts as the final escalation point for client incidents and requests