Technology Risk Manager - App, System & Vendor Security

Bank of China (Hong Kong) Limited; Hong Kong; On-site; HKD 700,000 - 1,000,000; Full time

Job summary

Bank of China (Hong Kong) Limited is seeking an experienced Information Security professional to support application, system, and third-party security initiatives. You will assess IT initiatives, review security policies, and guide risk management across multiple domains.

The role requires 4+ years in IT security within financial services, familiarity with HKMA frameworks, and strong communication in English and Mandarin. Travel flexibility is preferred; seniority may lead to Assistant Manager.

Qualifications

• Degree holder in Computer Science or related discipline.
• Over 4 years of experience in IT security, technology risk, risk management, compliance or IT audit in financial institutions.
• Holding at least one recognized professional qualification under HKMA enhanced competency framework (CISA, CISSP, CRISC preferable).
• Familiar with HKMA TMG-1, TM-E-1, PCI-DSS, ISO 2700-series or similar.
• Good command of English and Mandarin preferable; strong communication skills.
• Willingness to travel.

Responsibilities

• Assist in reviewing IT initiatives from technology risk perspectives.
• Assist to establish and review policies, guidelines, procedures in application security.
• Provide advisory on vulnerability scanning, penetration testing and DevSecOps.
• Conduct regular assessments on application security, system security, and third-party vendor risk.
• Provide awareness through training on third-party vendor risk management.

Skills

Technology risk advisory

Information security

Policy review

Security awareness training

Communication

Education

Bachelor's degree in CS/IS

Tools

Security testing tools

DevSecOps

Job description

Bank of China (Hong Kong) Limited is seeking an experienced Information Security professional to support application, system, and third-party security initiatives. You will assess IT initiatives, review security policies, and guide risk management across multiple domains.

The role requires 4+ years in IT security within financial services, familiarity with HKMA frameworks, and strong communication in English and Mandarin. Travel flexibility is preferred; seniority may lead to Assistant Manager.