Technology Risk Manager (APAC Centre Technology Risk & Compliance Management)

Bank of China (Hong Kong) Limited; Sha Tin; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Bank of China (Hong Kong) Limited is seeking an experienced IT Risk Manager to identify and mitigate risks across IT operations. You will coordinate with internal and external parties on information security, system audits, production safety, and compliance.

The role requires governance mindset with 5+ years in banking or IT, plus at least 1 year in a managerial position. Strong English and Chinese communication skills are essential.

Qualifications

• University Degree or above.
• 5+ years of banking or IT experience, with at least 1 year in a managerial position.
• Knowledge in production control and monitoring; able to assess deliverables' quality.
• Familiar with system development, quality management and auditing in financial tech.

Responsibilities

• Identify existing and potential IT operation risks and report to supervisors.
• Implement effective detection and control measures to strengthen IT production safety and effectiveness.
• Coordinate with internal and external parties to resolve IT security, audit, and compliance issues.
• Conduct production incident investigations and assist root cause analysis and rectification.
• Coordinate regulatory examinations and internal/external audits and monitor rectification status.
• Formulate and maintain IT department emergency response plans and procedures.
• Perform compliance checks of department policies and monitor review status.
• Lead training to promote awareness of production safety.

Skills

Banking/IT experience

IT risk management

Incident management

English/Chinese proficiency

Regulatory knowledge

Education

University Degree or above

Tools

CISA

CISSP

PMP

Job description

• Identify the existing and potential risk in IT operation, report the risk to supervisor and related parties in time, formulate the rectification plan and follow up
• Implement effective detection and control measures to strengthen the production operation safety and effectiveness of IT Department
• Responsible for the communication and cooperation with internal and external parties to solve the issue related to information security, system audit, production safety and compliance.
• Perform production incident investigation, assist to analysis the root cause and the rectification required.
• Co-ordinate the regulatory examination and internal/external audit and monitor the status of the rectification.
• Formulate and maintain the emergency response plan and procedure of IT department
• Perform compliance checking of the departments’ policies and procedures and monitor the review status.
• Carry out training to promote awareness related to production safety

Requirements

• University Degree or above
• At least 5 years of banking or IT professional experience, with 1 years of experience in managerial position,
• Having good knowledge in production control and monitoring and able to make professional opinion on the deliverables’ quality and completeness. Strong business and general managerial skills.
• Knowledge in system development, quality management and auditing in financial system technology.
• Familiar with regulatory requirement and industry practices in Hong Kong. Relevant knowledge in Mainland China and Southeast Asia will be an advantage.
• Demonstrated experience in incident management and familiar with the methodology of IT internal control.
• Deep understanding of IT technology, including networking operating system, programming language, development and testing methodology.
• CISA, CISSP and PMP is preferable.
• Good command in both written and spoken English and Chinese.
• Good organizational skill and analysis skill.
• Candidate with lesser experience will be considered as Associate Technology Risk Manager