APAC Tech Risk & Compliance Lead

Bank of China (Hong Kong) Limited; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Bank of China (Hong Kong) Limited is seeking a Technology Risk Manager for the Asia-Pacific Centre to identify IT operation risks, report to supervisors, and formulate rectification plans. The role emphasizes production safety and compliance within the IT department.

You will coordinate with internal and external parties for information security, system audits, and regulatory examinations, conduct incident investigations, and maintain emergency response procedures.

Qualifications

• University degree or above in a related field.
• Minimum 5 years in banking or IT, with at least 1 year in a leadership role.
• Strong knowledge of production control, IT auditing and deliverable quality.
• Familiar with IT development, testing, and regulatory requirements.

Responsibilities

• Identify IT operation risks and report to supervisors and stakeholders promptly.
• Implement detection and control measures to safeguard IT production operations.
• Coordinate internal and external parties on information security, audits, and compliance.
• Lead incident investigations and root-cause analyses with corrective actions.
• Support regulatory exams and audits, tracking rectifications.
• Develop and maintain IT emergency response plans and procedures.
• Provide training to raise awareness of production safety.

Skills

Managerial experience

IT risk & security

Regulatory compliance knowledge

Communication skills

Bilingual English/Chinese

Education

University Degree

Tools

CISA certification

CISSP certification

PMP certification

Job description

Bank of China (Hong Kong) Limited is seeking a Technology Risk Manager for the Asia-Pacific Centre to identify IT operation risks, report to supervisors, and formulate rectification plans. The role emphasizes production safety and compliance within the IT department.

You will coordinate with internal and external parties for information security, system audits, and regulatory examinations, conduct incident investigations, and maintain emergency response procedures.