Manager / Assistant Manager, Technology Risk

Shanghai Commercial Bank Ltd; Hong Kong; On-site; HKD 500,000 - 800,000; Full time

Job summary

Shanghai Commercial Bank Ltd. is seeking a seasoned Technology Risk professional in Hong Kong to help advance the cybersecurity risk management framework and related policies. You will monitor technology risk, review IT projects, and ensure effective business continuity planning with drills.

The role requires strong communication and regulatory awareness with at least five years of banking risk experience. Candidate qualifications include a CSX/CISSP-like credential and relevant banking risk

Qualifications

• Degree holder in Computer Science, Information Systems or related discipline.
• Professional qualifications such as CSX-S, CSX-E, CISA, CISM, CRISC, CGEIT, CISSP, CCSP or equivalent preferred.
• Minimum 5 years of relevant experience in banking/finance.
• Experience in technology risk management or auditing is advantageous.

Responsibilities

• Assist in developing and improving the cybersecurity risk management framework and update policies.
• Monitor and advise on Technology Risk covering cybersecurity and information security.
• Review new IT projects from the technology risk perspective.
• Formulate, enhance and implement the bank's business continuity plan and coordinate drill tests.
• Conduct risk control assurance reviews to ensure frontline controls are implemented daily.
• Prepare reports for submission to Committees.
• Coordinate and handle internal and external IT risk audits and regulatory reviews/examinations.

Skills

Risk management

Policy writing

Communication

Education

Bachelor's degree in Computer Science/Information Systems

Tools

Audit familiarity

Job description

Responsibilities:

• Assist in developing and improving the cybersecurity risk management framework, as well as reviewing and updating related policies and procedures
• Monitor and provide advice on Technology Risk covering cybersecurity and information security.
• Review new product proposals and IT projects from the technology risk perspective
• Formulate, enhance, and implement the bank's business continuity plan, as well as coordinate the conduct of drill tests
• Conduct technology risk control assurance reviews to ensure the first line of defence implements relevant technology risk controls consistently and effectively in daily operations
• Prepare reports for submission to the respective Committees
• Coordinate and handle internal and external audits on IT risk and as well as IT-related regulatory reviews and examinations

Requirements:

• Degree holder in Computer Science, Information Systems or related disciplines
• Professional qualifications of CSX-S, CSX-E, CISA, CISM, CRISC, CGEIT, CISSP, CCSP or other relevant qualifications are preferred
• Minimum 5 years of relevant experience in banking/finance industry
• Experience in technology risk management or auditing is an advantage
• Possess sufficient knowledge of banking operations and be familiar with applicable legal and regulatory requirements
• Good communication and business writing skills

(Candidate with less experience will be considered as Assistant Manager, Technology Risk)

More Job Information

Job Function

• 銀行 · 金融服務 - 一般 · 其他

Employment Term

• 全職

Education

• 學士