Technology Risk & Cybersecurity Assurance Lead

cncbinternational; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

cncbinternational in Hong Kong seeks an experienced risk professional to oversee technology and cybersecurity risk within the 2LoD framework. You will challenge first line controls and collaborate with stakeholders to strengthen risk management.

Responsibilities include designing risk management frameworks aligning with ISO27001, NIST, and PCI-DSS, conducting assurance reviews, and supporting audits and regulatory examinations. Strong communication in English and Chinese is essential.

Qualifications

• Degree holder preferably in Information Technology, Information Systems, Risk Management, Computer Science, or other relevant discipline.
• 5 - 8 years of working experience in operational risk management, technology risk management, or information and cybersecurity risk management.
• Prior experience in performing assurance reviews and IT audits is preferrable.
• Knowledge of relevant regulatory requirements relating to Operational Risk Management in banking industry.
• Certified in CISSP, CISA, CISM, CRISC or other recognized certificate is a must.
• Self-motivated, independent and able to communicate effectively at all levels.
• Good command of written and spoken English and Chinese (including Putonghua).

Responsibilities

• Acts as 2LoD to oversee technology risk management, cybersecurity risk management, and 1LoD control effectiveness.
• Responds to evolving business, environment, threats, and regulatory requirements.
• Assist to design, maintain and implement the technology risk management framework; incorporate ISO27001, NIST 800, PCI-DSS.
• Identify, monitor, and report operational risk; review adequacy of controls.
• Ensure 1LoD implements controls to address tech risk; oversee 1LoD risk assessments.
• Provide risk stewardship with appropriate risk management advice to technology and business stakeholders.
• Support tech risk activities including audits, product reviews, and regulatory examinations (C-RAF, iCAST, TM-E-1, TMG-1 ICA).
• Assist to implement control assurance strategy, policies, and tools per regulations and best practices.
• Conduct assurance reviews on banking ops and IT risks, including scope, testing, and reporting findings.
• Perform deep-dive operational risk reviews to identify root causes and recommend corrective actions.
• Assist in defining Risk Appetite and KRIs for tech and cyber risk.
• Submit MIS on control assurance issues to senior management.
• Participate in committees as needed to provide oversight.
• Prepare awareness programs to promote tech and cybersecurity risk culture.

Job description

cncbinternational in Hong Kong seeks an experienced risk professional to oversee technology and cybersecurity risk within the 2LoD framework. You will challenge first line controls and collaborate with stakeholders to strengthen risk management.

Responsibilities include designing risk management frameworks aligning with ISO27001, NIST, and PCI-DSS, conducting assurance reviews, and supporting audits and regulatory examinations. Strong communication in English and Chinese is essential.