Contract Technology Risk Analyst at BOC Group Life Assurance Company Limited

, , -

Full Time

Start Date

Immediate

Expiry Date

23 Jul, 26

Salary

0.0

Posted On

24 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Technology Risk Management, Data Management, Security Control Assessments, Risk Remediation, Information Security Policies, Regulatory Compliance, Incident Management, Root Cause Analysis, Cloud Computing, Application Security, Mobile Security, Web Security, AI Risk Management, IT Audit, Compliance Technology

Industry

Insurance

Description

Responsibilities: * Assist in coordinating, planning, and managing technology risk and data management initiatives in alignment with Group standards, internal polices and regulatory requirements. * Support business units in the timely completion of technology risk and data management tasks, ensuring the quality standard including delivering briefings and responding to task-related inquiries. * Collaborate closely with business units, Group’s Information Technology Department to integrate technology risk management and data management practices into daily operations. * Conduct security control assessments and technology risk evaluations for 3rd party service providers, including review of control evidence, risk remediation plan to ensure compliance with information security policies and regulatory expectations. * Assist in managing technology risk incidents by coordinating response efforts, facilitating root cause analysis, ensuring timely resolution, and maintaining comprehensive documentation for audit and reporting purposes. * Coordinate and organize regular training sessions, meetings to promote understanding and adherence to evolving technology risk and data management standards across business units. Requirements: * Bachelor’s Degree holder in Information Technology, Computer Science or related field. * Add-on with professional certifications like CISA/CISM/CISSP/CCSP/CRISC. * Minimum of 2 years of relevant experience, preferably within banking, insurance, or financial institutions, in compliance technology (either first or second line of defense) or IT audit. * Knowledge of cloud computing, application security (mobile and web), and AI-related risk and security. * Familiar with and able to understand risk management framework and regulatory requirements (HKIA GL20, GL14, PCPD Privacy).

Responsibilities

The role involves coordinating technology risk and data management initiatives while ensuring compliance with internal policies and regulatory standards. You will also conduct security control assessments for third-party providers and manage technology risk incidents through root cause analysis and documentation.