Senior Technology Risk & Cyber Security Leader

Bank of China (Hong Kong) Limited; Hong Kong; On-site; HKD 420,000 - 750,000; Full time

Job summary

Bank of China (Hong Kong) Limited is seeking an experienced cybersecurity professional to formulate policies, manage risk, and lead incident response across geographies. The role requires coordinating with business units and regional SOC teams to strengthen security controls and manage cyber risk.

The ideal candidate will have at least 2 years in IT security within a large financial institution, relevant certifications, and familiarity with regulatory requirements such as NIST, PCI-DSS, and ISO

Qualifications

• Degree holder in Computer Science or information security related field.
• At least 2 years in IT security, risk management, compliance or IT audit in a sizable financial institution.
• Professional qualifications such as CISA, CISSP, CISM preferred.
• Familiar with security frameworks and regulatory requirements (e.g., NIST, PCI-DSS, ISO 27001).

Responsibilities

• Formulate and manage cyber security policies, standards and procedures.
• Assist in planning technology risk management strategies and work plans.
• Participate in cyber security projects for design, development and implementation.
• Conduct cyber security assessment and IT risk evaluation across controls and assets.
• Coordinate penetration tests, red/blue/purple team exercises and vulnerability assessments.
• Support cyber security incident response with local and regional SOC teams.
• Engage cross-country teams to coordinate incident response drills and risk reviews.
• Monitor and improve security operations, IAM, cloud security and threat management.
• Serve as SME to address risk issues and remediation with business units.
• Stay informed on latest threats and cyber threat intelligence.

Skills

Cybersecurity

Policy formulation

Threat modeling

Incident response

Risk assessment

Security governance

Education

Bachelor

Job description

Bank of China (Hong Kong) Limited is seeking an experienced cybersecurity professional to formulate policies, manage risk, and lead incident response across geographies. The role requires coordinating with business units and regional SOC teams to strengthen security controls and manage cyber risk.

The ideal candidate will have at least 2 years in IT security within a large financial institution, relevant certifications, and familiarity with regulatory requirements such as NIST, PCI-DSS, and ISO