Strategic IT Risk & Compliance Manager

Bank of China (Hong Kong); Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Bank of China (Hong Kong) seeks an experienced Associate Technology Risk Manager to identify IT operation risks, monitor controls, and report to supervision. You will coordinate with internal and external parties on information security, system audit, production safety and compliance.

The role requires at least five years in banking or IT with managerial experience, a university degree or above, and certifications such as CISA/CISSP/PMP are preferred.

Qualifications

• Bachelor degree or higher in IT, banking or related field.
• At least 5 years in banking or IT with 1 year in managerial role.
• Strong knowledge in production control and monitoring.
• Familiar with IT risk management and internal control frameworks.
• Knowledge of regulatory requirements in Hong Kong.

Responsibilities

• Identify existing and potential IT operation risks and report to supervisor and related parties in time.
• Implement detection and control measures to strengthen IT production safety and departmental effectiveness.
• Coordinate with internal and external parties on information security, system audit, production safety and compliance.
• Perform production incident investigations and root-cause analysis with required rectifications.
• Coordinate regulatory examinations and internal/external audits and monitor rectification status.
• Formulate and maintain IT department emergency response plan and procedures.
• Conduct compliance checks of policies and procedures and monitor review status.
• Carry out training to promote awareness related to production safety

Skills

Risk management

IT operations

Incident management

Communication

English & Chinese

Education

University Degree or above

CISA

CISSP

PMP

Tools

IT governance

Regulatory knowledge

Job description

Bank of China (Hong Kong) seeks an experienced Associate Technology Risk Manager to identify IT operation risks, monitor controls, and report to supervision. You will coordinate with internal and external parties on information security, system audit, production safety and compliance.

The role requires at least five years in banking or IT with managerial experience, a university degree or above, and certifications such as CISA/CISSP/PMP are preferred.