Senior Associate/ Associate, Technology Risk Management, Technology and Operations

DBS Bank Ltd; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

DBS Bank Ltd in Hong Kong seeks a Risk Management professional to oversee technology risk across IT operations. The role partners with Group and Local Technology and Risk Management functions to assess and manage risks related to Site Reliability Engineering and Emerging Technology, including Generative AI and Public Cloud.

You will implement governance frameworks, support risk projects, and contribute to forums and committees.

Qualifications

• Degree holder, preferably in Information Systems or related discipline.
• Minimum of 3 years in technology risk or information risk and control management in a financial services or banking environment.
• Knowledge of Information Security, System Resiliency, Availability and Software Development practices.
• Familiarity with HKMA regulations (TM-E1, TM-G-1, SA-2, C-RAF) would be advantageous.
• Professional certificates such as CISA, CISSP, CISM and/or CRISC would be advantageous.
• Strong IT risk management exposure and ability to drive risk programs.
• Proficient in English, spoken and written.
• Strong analytical, teamwork, and ability to work independently.
• Strong interpersonal communication, project management, and presentation skills.

Responsibilities

• Partner with stakeholders to assess and manage technology risks in areas such as Site Reliability Engineering and Emerging Technology.
• Provide technology risk guidance to technology and operation teams.
• Implement and enhance governance, risk and control frameworks and procedures.
• Support risk-related projects to enhance technology risk control and management.
• Prepare content for the Hong Kong Technology Risk Forum and review stakeholders’ materials.
• Support HK risk forums and committees (HK Technology Risk Forum, HK Risk Board).
• Engage with technology stakeholders to identify risks and drive remediation activities.
• Perform and validate the risk control self-assessment (RCSA) and residual risk processes.

Skills

Analytical skills

Teamwork

Independent work

Communication skills

Project management

Presentation skills

English proficiency

Education

Degree in Information Systems or related discipline

Job description

Business Function

Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In T&O, we manage the majority of the Bank’s operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Responsibility

• Partner with stakeholders across Group and Local Technology and Risk Management functions to assess and manage technology risks relating to areas such as Site Reliability Engineering, and Emerging Technology, including but not limited to Generative AI and Public Cloud
• Provide technology risk subject matter guidance and advisory to technology & operation T&O and line of business technology teams
• Implement and/or enhance frameworks and processes for governance, risk and control, operationalization of processes and procedures
• Support technology risk related project across business and support units such as enhance technology risk control and management project
• Assist in driving and managing the agenda for the Hong Kong Technology Risk Forum, including preparation of content, and reviewing stakeholders’ material that will be presented
• Support Technology Risk Management on Group Technology Risk Forum, Hong Kong Operational and Technology Risk Committee, Hong Kong Risk Executive Committee, and the Hong Kong Board Risk Management Committee
• Engage with technology stakeholders to proactively identify risks at a detailed and technical level and ensure that IT is effectively driving remediation activities and to continuously improve IT risk posture
• Perform and validate the risk control self-assessment RCSA and residual risk process across technology with technology risk managers

Requirements

• Degree holder, preferably in majoring in Information Systems or related discipline
• Minimum of 3 years in technology risk or information risk and control management in a financial services or banking environment, preferably with comprehensive experiences in regulatory engagement
• Knowledge of Information Security, System Resiliency & Availability & Software Development practices and frameworks preferred
• Familiarity with regulatory requirements, especially HKMA’s requirements (e.g., TM-E1, TM-G-1, SA-2, C-RAF) would be advantageous
• Holder of professional certificates such as CISA, CISSP, CISM and/or CRISC would be advantageous
• Good technical competencies and exposure to IT application or infrastructure development, support and management, experience in driving IT risk management via digital platform is a plus
• Proficient in English - spoken and written
• High integrity and professional work practice Strong analytical, teamwork capability and able to work independently
• Strong interpersonal communication, project management, and presentation skills at all levels.
• The Candidate is willing to be groomed to be core member of the team

Location

Two Harbour Square

Job

Risk Management

Schedule

Regular

Employee Status

Full time