Technology Risk Lead - Cyber & Regulatory Compliance

Dah Sing Financial Group; Hong Kong; On-site; HKD 1,000,000 - 1,600,000; Full time

Job summary

Dah Sing Financial Group is seeking an experienced Technology Risk professional to assist the Head of Technology Risk in regulatory and audit matters and to oversee risk assessments across the Group.

The role covers cyber security, FinTech, supply chain, and IT change risk. You will liaise with IT departments and subsidiaries in Macau and Mainland China to ensure controls meet regulatory requirements.

Qualifications

• ≥10 years in technology risk management, banking preferred.
• University degree in Computer Science / IT / Information Systems Management or equivalent.
• One or more certificates listed below or equivalent: CISSP, CISA, CISM, CCSP.
• Solid experience in performing cyber security and technology risk assessments.
• Good understanding of IT systems, emerging technologies, and controls to mitigate risks.
• Sound knowledge of regulatory requirements in Hong Kong, Macau and Mainland China.
• Excellent written and verbal communication skills including ability to communicate clearly and concisely to various levels.
• Ability to communicate and understand Chinese as regulatory requirements are written in the local language.
• Ability to adapt to a fast-moving IT landscape and keep pace with new technologies.
• Analytical mind-set and meticulous in the deliverables.
• Dedication to fostering an inclusive culture and value diverse perspectives.

Responsibilities

• Design, develop and update technology risk related policies, standards and guidelines.
• Perform risk assessments on IT projects, including but not limited to enhancements and/or new adoption of technologies across information security, infrastructure and application systems.
• Assess and manage cyber security risks, including governance, identification, protection, detection, response, recovery, to uplift cyber resilience and system stability.
• Assess and manage Fintech risks, including big data, AI, cloud computing and digital innovations, to ensure regulatory compliance and sound risk management.
• Assess and manage supply chain risks including third party and nth party risks affecting IT outsourced activities, monitoring service providers’ security postures.
• Handle regulatory inquiries, onsite/offsite examinations and surveys.
• Handle audit exercises conducted by internal and/or external auditors.
• Provide day-to-day technology risk advisory to all IT departments and subsidiaries in Macau and Mainland China.
• Apply process to ensure IT operational and control risks are within risk thresholds; evaluate adequacy of risk management controls.
• Assist in communicating risk management standards, policies and procedures to stakeholders.
• Analyze and report to management, investigate non-compliance of risk policies.
• Define framework for technology risk / cybersecurity monitoring (indicators, datasets, collection, methods).
• Assist to analyze IT incidents and make remediation recommendations.
• Promote risk awareness and culture within Information Technology Division.
• Review risks associated with production changes and ensure effective risk mitigation controls.

Skills

Cyber security

Technology risk assessments

Regulatory knowledge (HK/China)

Education

Bachelor in Computer Science / Information Technology / Information Systems Management

CISSP

CISA

CISM

CCSP

Job description

Dah Sing Financial Group is seeking an experienced Technology Risk professional to assist the Head of Technology Risk in regulatory and audit matters and to oversee risk assessments across the Group.

The role covers cyber security, FinTech, supply chain, and IT change risk. You will liaise with IT departments and subsidiaries in Macau and Mainland China to ensure controls meet regulatory requirements.