Senior Technology Risk Manager (Affiliated and Overseas Entities) at Bank of China (Hong Kong) Limited

, , -

Full Time

Start Date

Immediate

Expiry Date

21 Jul, 26

Salary

0.0

Posted On

22 Apr, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Technology Risk Management, Information Security, IT Audit, Compliance, Risk Assessment, Regulatory Compliance, System Development Management, Key Risk Indicators, Remediation, Policy Development, Threat Analysis, Vulnerability Management, Training, Stakeholder Management

Industry

Banking

Description

ROLES AND RESPONSIBLITIES * Responsible for the planning, management and daily operation of technology risk management * Responsible for communicating and cooperating with internal working units to solve any issues related to information security/technology risk management of overseas branches and affiliated organization. * Conduct regular IT risk and compliance assessment in overseas branches and coordinate overseas branch to perform technology risk self-assessment. * Collect key risk indicator information from overseas branches and perform analysis. * Responsible for supervising overseas branch and affiliated organization on those issues arising from any independent assessment from regulatory inspections, external or internal audit, or other third parties and tracking their remediation activities * Influence and drive oversea branches and affiliated organization on technology risk management initiatives in alignment with group policies and standards * Proactively communicate with overseas branches and affiliated organization to understand update-to-date local regulatory requirement. * Keep abreast with latest threats, vulnerabilities, mitigation and industry best practices * Conduct technology risk and information security awareness training to staffs and technology risk managers in oversea branches JOB REQUIREMENTS * Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline. * Over 6 years of experience in IT security, technology risk, risk management, system development management, compliance or IT audit function, gained from other sizable financial institutions. Candidate with less experience will be considered as Analyst * Demonstrated experience working with the regulators in the region, articulate in local regulations and laws pertaining to IT Risk would be an advantage * Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM) , Certified in Risk and Information Systems Control (CRISC) , Certified Internal Auditors (CIA) is preferable. * Good command of written and spoken English with Mandarin is preferable. * Flexibility in traveling * Independent and strong self-initiative.

Responsibilities

The role involves planning and managing technology risk operations while coordinating with overseas branches to ensure compliance with group policies and local regulations. You will supervise remediation activities, conduct risk assessments, and provide information security training to staff.