Analyst, IT & Cyber Risk Control, Risk Management, Asia Pacific

Banco Santander SA; Hong Kong; On-site; HKD 520,000 - 640,000; Full time

Job summary

Banco Santander SA in Hong Kong seeks an IT & Cyber Risk Analyst to provide independent oversight of technology and cyber risk across APAC branches. You will monitor IT and cybersecurity risks, assess impact, and oversee control effectiveness and remediation progress.

The role involves supporting risk assessments, regulatory reviews, and ensuring policy alignment with local requirements. Strong English and Mandarin are essential; Spanish is a plus.

Qualifications

• At least 2 years of proven IT security and controls experience in banking or Big 4.
• Bachelor’s degree in computer science, engineering, physics, math or related field; postgraduate degree a plus.
• CISA is required; CISM, CRISC will be highly valued.
• Strong English and Mandarin; Spanish will be a plus.
• Ability to understand technical IT & Cyber processes and documents (Network maps, Firewall rules, etc.).

Responsibilities

• Monitor emerging IT and cybersecurity risks, assess their potential impact on the organization, and oversee the effectiveness of related controls and the progress of remediation action plans.
• Support the assessment, monitoring, and reporting of the IT, cybersecurity, and business continuity risk profile across SCIB APAC branches.
• Support and coordinate independent assessments of technology and cybersecurity risks and controls, including maturity assessments, regulatory assessments (e.g., CRAF), and other relevant reviews.
• Review Group policies and procedures and work in the transposition ensuring alignment with local regulatory requirements.
• Review and monitor internal and external IT and cybersecurity incidents, Key Risk Indicators (KRIs), audit findings and recommendations, and associated remediation actions.

Skills

IT risk management

Cyber security controls

Regulatory risk assessments

English–Mandarin proficiency

Spanish language

Education

Bachelor's degree in Computer Science or related field

Postgraduate degree a plus

Tools

CISA certification

CISM certification

CRISC certification

Job description

Analyst, IT & Cyber Risk Control, Risk Management, Asia Pacific Country: Hong Kong

As an IT & Cyber risk Analyst, you will provide an independent oversight over Technology and Cyber-Security risks and controls across SCIB APAC branches.

Key Responsibilities

• Monitor emerging IT and cybersecurity risks, assess their potential impact on the organization, and oversee the effectiveness of related controls and the progress of remediation action plans.
• Support the assessment, monitoring, and reporting of the IT, cybersecurity, and business continuity risk profile across SCIB APAC branches.
• Support and coordinate independent assessments of technology and cybersecurity risks and controls, including maturity assessments, regulatory assessments (e.g., CRAF), and other relevant reviews.
• Review Group policies and procedures and work in the transposition ensuring alignment with local regulatory requirements.
• Review and monitor internal and external IT and cybersecurity incidents, Key Risk Indicators (KRIs), audit findings and recommendations, and associated remediation actions.

Basic Requirements

• At least 2 years of proven experience in IT security and controls functions in the Banking Industry and/or Big 4.
• Bachelor’s degree in computer science, Engineering, Physics, Math or related field; post graduate degree a plus.
• IT security certifications CISA is required; CISM, CRISC will be highly valued.
• High English and Mandarin Level.
• Spanish will be a plus.
• Ability to understand technical IT & Cyber process and documents (Network maps, Firewall rules, etc.)

The Santander Way

Santander is evolving from a global, high-impact brand into a technology-driven organization, and our people are at the heart of this journey. Together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what's possible. This is more than a strategic shift. It's a chance for driven professionals to grow, learn, and make a real difference. Our mission is to contribute to help more people and businesses prosper. We embrace a strong risk culture and all our professionals at all levels are expected to take a proactive and responsible approach toward risk management.