APAC IT & Cyber Risk Control Analyst

Banco Santander SA; Hong Kong; On-site; HKD 520,000 - 640,000; Full time

Job summary

Banco Santander SA in Hong Kong seeks an IT & Cyber Risk Analyst to provide independent oversight of technology and cyber risk across APAC branches. You will monitor IT and cybersecurity risks, assess impact, and oversee control effectiveness and remediation progress.

The role involves supporting risk assessments, regulatory reviews, and ensuring policy alignment with local requirements. Strong English and Mandarin are essential; Spanish is a plus.

Qualifications

• At least 2 years of proven IT security and controls experience in banking or Big 4.
• Bachelor’s degree in computer science, engineering, physics, math or related field; postgraduate degree a plus.
• CISA is required; CISM, CRISC will be highly valued.
• Strong English and Mandarin; Spanish will be a plus.
• Ability to understand technical IT & Cyber processes and documents (Network maps, Firewall rules, etc.).

Responsibilities

• Monitor emerging IT and cybersecurity risks, assess their potential impact on the organization, and oversee the effectiveness of related controls and the progress of remediation action plans.
• Support the assessment, monitoring, and reporting of the IT, cybersecurity, and business continuity risk profile across SCIB APAC branches.
• Support and coordinate independent assessments of technology and cybersecurity risks and controls, including maturity assessments, regulatory assessments (e.g., CRAF), and other relevant reviews.
• Review Group policies and procedures and work in the transposition ensuring alignment with local regulatory requirements.
• Review and monitor internal and external IT and cybersecurity incidents, Key Risk Indicators (KRIs), audit findings and recommendations, and associated remediation actions.

Skills

IT risk management

Cyber security controls

Regulatory risk assessments

English–Mandarin proficiency

Spanish language

Education

Bachelor's degree in Computer Science or related field

Postgraduate degree a plus

Tools

CISA certification

CISM certification

CRISC certification

Job description

Banco Santander SA in Hong Kong seeks an IT & Cyber Risk Analyst to provide independent oversight of technology and cyber risk across APAC branches. You will monitor IT and cybersecurity risks, assess impact, and oversee control effectiveness and remediation progress.

The role involves supporting risk assessments, regulatory reviews, and ensuring policy alignment with local requirements. Strong English and Mandarin are essential; Spanish is a plus.