Tech Risk Manager – IT & Cybersecurity (Banking)

Industrial and Commercial Bank of China; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

Industrial and Commercial Bank of China (Asia) Limited is seeking a Senior Officer to Manager, Technology Risk to identify, measure, monitor and control technology risks across existing and new systems, processes and initiatives. The role requires expertise in IT security controls, policy development, incident investigations and collaboration with technology teams to strengthen risk posture.

Certifications are preferred and 5–7 years in IT/cybersecurity risk management with HKMA regulatory

Qualifications

• University graduate in Computer Science / IT or related discipline.
• Professional certifications (CISSP, CISM, CISA, CREST CPSA/CRT, CEH) preferred.
• 5–7 years IT/Cybersecurity, e-Banking security, BCP/DR or related risk control experience.
• Solid experience handling technical information and cybersecurity issues with understanding of regulations (HKMA TM-G-1, TM-G-2, SA-2, C-RAF, STDB, SFC, PDPO).
• Experience writing policies, procedures and reports.
• Knowledge of infrastructure platforms (Data Centre Operations, Network Services, Desktop tech, servers, mainframe).
• ISO27001 knowledge/experience preferred.
• Strong sense of responsibility and ability to work under pressure.
• Able to work independently with good communication and interpersonal skills.
• MS Word, Excel proficiency; Chinese input; good English and Chinese (Mandarin) skills.
• ECF on Cybersecurity preferable.

Responsibilities

• Perform technology risk management for existing/new systems, processes and initiatives.
• Ensure awareness of, and compliance with, the Bank's IT control policies, and provide reports after investigation of technology-related incidents.
• Implement risk issue management procedures to enforce policies and guidelines in daily operation.
• Recommend and implement remedial actions and control measures.
• Plan and work with the technology team on technology-related initiatives.
• Perform review and/or security assessment on related initiatives.

Skills

Security risk management

Policy writing

Project coordination

Education

Bachelor's degree in Computer Science / IT or related

CISSP

CISM

CISA

CREST CPSA / CRT

CEH

Job description

Industrial and Commercial Bank of China (Asia) Limited is seeking a Senior Officer to Manager, Technology Risk to identify, measure, monitor and control technology risks across existing and new systems, processes and initiatives. The role requires expertise in IT security controls, policy development, incident investigations and collaboration with technology teams to strengthen risk posture.

Certifications are preferred and 5–7 years in IT/cybersecurity risk management with HKMA regulatory