Technology Risk Manager (Affiliated and Overseas Entities) at Bank of China (Hong Kong) Limited

, , -

Full Time

Start Date

Immediate

Expiry Date

21 Jul, 26

Salary

0.0

Posted On

22 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

IT Risk Management, Compliance Assessment, Information Security, Regulatory Compliance, Audit Management, Risk Assessment, Technology Risk, Internal Audit, External Audit, System Development Management, IT Security, Policy Development, Vulnerability Management, Threat Analysis, Training Delivery

Industry

Banking

Description

ROLES AND RESPONSIBILITIES * Conduct regular IT risk and compliance assessment in overseas branches and coordinate overseas branch to perform technology risk self-assessment. * Collect key risk indicator information from overseas branches and perform analysis. * Responsible for supervising overseas branch on those issues arising from any independent assessment from regulatory inspections, external or internal audit, or other third parties and tracking their remediation activities * Influence and drive oversea branches on technology risk management initiatives in alignment with group policies and standards * Proactively communicate with overseas branches to understand update-to-date local regulatory requirement. * Keep abreast with latest threats, vulnerabilities, mitigation and industry best practices * Conduct technology risk and information security awareness training to staffs in oversea branches JOB REQUIREMENTS * Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline. * 3 years of experience in IT security, technology risk, risk management, system development management, compliance or IT audit function, gained from other sizable financial institutions. Candidate with less experience will be considered as Analyst * Demonstrated experience working with the regulators in the region, articulate in local regulations and laws pertaining to IT Risk would be an advantage * Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM) , Certified in Risk and Information Systems Control (CRISC) , Certified Internal Auditors (CIA) is preferable. * Good command of written and spoken English with Mandarin is preferable. * Flexibility in traveling * Independent and strong self-initiative.

Responsibilities

The Technology Risk Manager will conduct IT risk and compliance assessments for overseas branches while coordinating self-assessments and tracking remediation activities. They are responsible for influencing technology risk initiatives and ensuring alignment with group policies and local regulatory requirements.