Bank Product Manager (Risk, Compliance & Operations)

Job Description

• Domain Insight & Planning. Ground product insight in the working scenarios and efficiency of internal users — operations staff, risk and compliance teams, and finance personnel; combine business objectives with regulatory obligations to run gap assessments and identify system capability gaps; define domain system roadmaps and iteration plans, prioritising by regulatory deadlines, risk exposure, and operational efficiency; prepare business cases, and track changes in HKMA / SFC requirements and incorporate them into planning.

• End-to-end Back/Middle-office Business Process Design. Take end-to-end ownership of the business processes under your remit — defining inputs and outputs, status flows, and exception handling at each step to ensure full end-to-end traceability with a complete audit trail; perform four-layer design for each step — business process + system interaction + data structure + business logic — so that control requirements such as approval, review, and limits are systemically embedded, with internal control mechanisms including segregation of duties (SoD) and dual review properly implemented; make straight-through processing (STP) and automation the primary optimisation objective, replacing repetitive manual work such as rekeying and reconciliation, and shortening turnaround time (TAT).

• Requirement Documentation & Bridging Business, Compliance and Technology. Independently author BRDs, PRDs, business rule specifications, and acceptance criteria, translating regulatory provisions clause by clause into testable system requirements; act as a two-way translator among business, compliance, audit, and technology — using regulatory, business, and technical language to keep requirements unambiguous and traceable — and serve as the single point of truth for requirements, managing cross-domain requirement conflicts and changes; visualise interaction logic with prototyping and diagramming tools (Axure / Figma / Visio, etc.) to eliminate misalignment.

• Delivery Management & Post-launch Operations. Work with development, testing, operations, AML, and internal audit teams to track the quality of requirement implementation (requirements involving customer-facing experience are led by the Customer Products PM, while this role owns the consistency of control points, data, and back-office processing); define and lead UAT and regulatory scenario testing (e.g., sanctions/watchlist screening hits, alert dispositions, regulatory data reconciliation) as acceptance gates, and coordinate go-live rehearsals and contingency plans; establish operational monitoring metrics (alert handling timeliness, STP rate, error rate, on-time reporting rate), drive continuous optimisation with data, and own outcomes in risk reduction, compliance attainment, and operational efficiency.

• Data Quality & Regulatory Reporting Support. Design data quality control rules at source systems; work with the compliance and finance functions on field definitions, standardisation of data conventions, and validation rule design for regulatory reporting systems, ensuring reported data is consistent with business facts and fully traceable.

Requirements

• Bachelor's degree or above; qualifications in finance, economics, accounting, law, information management, or mathematics / statistics preferred;

• Minimum 5 years of product management or business analysis experience in banking or fintech, including at least 3 years deeply working in no fewer than two of the following domains: risk management, compliance (AML / sanctions), business operations, or finance and accounting systems;

• Familiar with Hong Kong's banking regulatory framework, with in-depth understanding of business rules in at least one of: AML/CFT (HKMA guidelines), customer due diligence (CDD/EDD), the Organised and Serious Crimes Ordinance / AMLO regime, or regulatory reporting;

• Able to independently design complete back/middle-office business processes — status flows, exception branches, approval and review control points, and audit trails — rather than owning only a single report or module;

• Able to independently produce BRDs / PRDs / business rule specifications, translating regulatory requirements into testable system requirements; proficient with at least one prototyping or diagramming tool;

• Fluent Mandarin (working language — able to interface directly with Group teams); fluent Cantonese and English (written and spoken), with the ability to work with English-language regulatory documents;

• Structured thinking, cross-functional drive, strong principles, and resilience (able to engage effectively with auditors and regulators).