IT & Cyber Risk Analyst, APAC — Risk Control

Santander; Hong Kong; On-site; HKD 420,000 - 640,000; Full time

Job summary

Santander is seeking an Analyst, IT & Cyber Risk Control in the Asia Pacific region. The role provides independent oversight of technology and cyber-security risks and controls across SCIB APAC branches.

You will monitor and assess IT/cyber risks, support risk profiling, and coordinate independent reviews, including regulatory assessments. Strong English and Mandarin are required; Spanish is a plus.

Qualifications

• Bachelor’s degree in computer science, engineering, physics, math or related field; postgraduate degree a plus.
• CISA certification required; CISM/CRISC valued.
• High English and Mandarin levels; Spanish a plus.

Responsibilities

• Monitor emerging IT and cybersecurity risks, assess impact and oversee remediation actions.
• Support assessment, monitoring, and reporting of IT, cybersecurity, and business continuity risk across APAC branches.
• Coordinate independent assessments of technology and cybersecurity risks and controls, including maturity and regulatory reviews (e.g., CRAF).
• Review group policies and ensure alignment with local regulatory requirements.
• Review and monitor IT and cybersecurity incidents, KRIs, audit findings, and remediation actions.

Skills

IT security

Regulatory compliance

Risk monitoring

English proficiency

Mandarin proficiency

Spanish language (nice to have)

Education

Bachelor's degree in CS/Engineering/Physics/Math or related field

Postgraduate degree a plus

Tools

CISA

CISM

CRISC

Job description

Santander is seeking an Analyst, IT & Cyber Risk Control in the Asia Pacific region. The role provides independent oversight of technology and cyber-security risks and controls across SCIB APAC branches.

You will monitor and assess IT/cyber risks, support risk profiling, and coordinate independent reviews, including regulatory assessments. Strong English and Mandarin are required; Spanish is a plus.