Technology Risk & IT Internal Control Lead

Bank of China (Hong Kong); Hong Kong; Sur place; HKD 600 000 - 840 000; Plein temps

Avantages offerts par ce poste

Medical and life insurance

Allowance packages

Résumé du poste

Bank of China (Hong Kong) is recruiting an experienced Associate Technology Risk Manager / equivalent for the IT Risk team. The role focuses on identifying risk in IT operations, implementing controls, and coordinating with regulators and audits to ensure compliance in a banking environment.

The candidate should have a university degree, 5+ years in banking or IT, and professional certifications such as CISA/CISSP/PMP are preferred.

Qualifications

• Knowledge of IT internal controls and governance.
• Experience in incident management and IT risk.
• Familiarity with financial system technology and auditing.

Responsabilités

• Identify existing and potential risks in IT operation and report to supervisor.
• Implement detection and control measures to strengthen IT operation safety and effectiveness.
• Coordinate with internal and external parties on information security, system audit, production safety and compliance.
• Conduct production incident investigations and assist root-cause analysis and rectifications.
• Coordinate regulatory examinations and internal/external audits and monitor rectifications.
• Formulate and maintain IT department emergency response plans and procedures.
• Perform compliance checks of department policies and monitor reviews.
• Provide training to promote production safety awareness.

Connaissances

CISA

CISSP

PMP

Formation

University Degree or above

Description du poste

Bank of China (Hong Kong) is recruiting an experienced Associate Technology Risk Manager / equivalent for the IT Risk team. The role focuses on identifying risk in IT operations, implementing controls, and coordinating with regulators and audits to ensure compliance in a banking environment.

The candidate should have a university degree, 5+ years in banking or IT, and professional certifications such as CISA/CISSP/PMP are preferred.