Manager, Contract Management Services, Ops Risk and Control

Job Summary

• Supply Chain Management (SCM) is responsible for the overall commercial and risk management of the Bank’s external third‑party suppliers. To meet increasing business demands, SCM is establishing a new capability to support Contract Managers/Owners in fulfilling their obligations for managing third‑party contracts under their accountability.
• The Manager, Contract Management Services (CMS), Ops Risk and Control coordinates and supports Contract Manager/Owners with audit engagements, regulatory reviews and third‑party supplier questionnaires impacting the function. This role serves as a subject‑matter expert, advising and supporting Contract Managers/Owners in executing controls and addressing potential gaps related to country‑specific regulatory requirements. The role ensures effective compliance throughout the contract lifecycle, aligned with banking regulations and risk requirements.
• The Manager, CMS, Ops Risk and Control will work closely with CMS Category leads, Risk Group Leads and Contract Managers/Owners to ensure that all documented issues are factual, accurate and complete.

• Support the Head, CMS in accelerating the delivery of efficiencies and advancing CMS services across the Bank and all applicable categories, ensuring alignment with the Bank’s overall procurement lifecycle objectives.
• Support development and implementation of comprehensive risk management frameworks, policies, and procedures, focusing on risk and compliance management.
• Provides strategic oversight and operational leadership for Ops Risk and Control within CMS services, ensuring timely and effective resolution of stakeholder issues across the Bank.
• Contribute to the design and development of the overall CMS framework to clarify roles and responsibilities, particularly in work allocation between category, supplier management, and sourcing teams. This includes articulating the scope and value proposition of Contract Management Services.
• Drive risk control self‑assessment (RCSA) programs to identify, assess, and mitigate operational risks across business units and functions.
• Established key risk indicators (KRIs) and performance metrics to monitor risk exposure and ensure compliance with regulatory requirements.
• Collaborated closely with cross‑functional teams to conduct risk assessments, identify control gaps, and develop effective risk mitigation strategies. (M7)
• Act as the primary point of contact for Ops Risk and Control CMS and ensure inquiries and issues from the stakeholders are addressed in a timely manner.
• Provide regular updates, dashboards, and reports to senior management on sourcing process activities and performance, including progress updates on key initiatives (e.g. FFG, cost optimisation programmes, etc)
• Establish the findings are factually correct through appropriate information gathering and obtaining corresponding domain head’s approval before the findings are published in the final reports.
• Maintain status of regulatory requirements tracker with necessary updates and knowledgebase and also manage the central tracker of audit engagements.
• Coordinate with domains to ensure external audit issues are closed before target dates.
• Ensure remedial actions are prioritised into requirements.
• Maintain an inventory of regulatory responses from the first line to expedite future responses.

• Support initiatives and identify use cases to optimise process and cost efficiency (e.g. Automation, AI, Process Simplification)
• Leverage technology and best practices to streamline workflows and improve data accuracy and accessibility.
• Drive initiatives to optimise value creation through effective contract management.
• Monitor and improve end user experience.

• Oversee teams delivering the CMS to Contract Managers/Owners
• Support the Contract Manager/Owner through Contract Owner Training, risk assessments are completed, and contracts documents are in order.
• Ensure Contract Compliance has been completed to enable the contracts to be operational.
• Ensure that the key contract obligations are registered in the key obligations log; and
• Work with the Contract Manager to attest that the…