Technology Risk Manager (Asia-pacific Centre Technology Risk & Compliance Mgmnt)

Bank of China (Hong Kong) Limited; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Bank of China (Hong Kong) Limited is seeking a Technology Risk Manager for the Asia-Pacific Centre to identify IT operation risks, report to supervisors, and formulate rectification plans. The role emphasizes production safety and compliance within the IT department.

You will coordinate with internal and external parties for information security, system audits, and regulatory examinations, conduct incident investigations, and maintain emergency response procedures.

Qualifications

• University degree or above in a related field.
• Minimum 5 years in banking or IT, with at least 1 year in a leadership role.
• Strong knowledge of production control, IT auditing and deliverable quality.
• Familiar with IT development, testing, and regulatory requirements.

Responsibilities

• Identify IT operation risks and report to supervisors and stakeholders promptly.
• Implement detection and control measures to safeguard IT production operations.
• Coordinate internal and external parties on information security, audits, and compliance.
• Lead incident investigations and root-cause analyses with corrective actions.
• Support regulatory exams and audits, tracking rectifications.
• Develop and maintain IT emergency response plans and procedures.
• Provide training to raise awareness of production safety.

Skills

Managerial experience

IT risk & security

Regulatory compliance knowledge

Communication skills

Bilingual English/Chinese

Education

University Degree

Tools

CISA certification

CISSP certification

PMP certification

Job description

Technology Risk Manager (Asia-pacific Centre Technology Risk & Compliance Mgmnt)

Identify the existing and potential risk in IT operation, report the risk to supervisor and related parties in time, formulate the rectification plan and follow up

Implement effective detection and control measures to strengthen the production operation safety and effectiveness of IT Department

Responsible for the communication and cooperation with internal and external parties to solve the issue related to information security, system audit, production safety and compliance.

Perform production incident investigation, assist to analysis the root cause and the rectification required.

Co-ordinate the regulatory examination and internal/external audit and monitor the status of the rectification.

Formulate and maintain the emergency response plan and procedure of IT department

Perform compliance checking of the departments’ policies and procedures and monitor the review status.

Carry out training to promote awareness related to production safety

Requirements

University Degree or above

At least 5 years of banking or IT professional experience, with 1 years of experience in managerial position,

Having good knowledge in production control and monitoring and able to make professional opinion on the deliverables’ quality and completeness. Strong business and general managerial skills.

Knowledge in system development, quality management and auditing in financial system technology.

Familiar with regulatory requirement and industry practices in Hong Kong. Relevant knowledge in Mainland China and Southeast Asia will be an advantage.

Demonstrated experience in incident management and familiar with the methodology of IT internal control.

Deep understanding of IT technology, including networking operating system, programming language, development and testing methodology.

CISA, CISSP and PMP is preferable.

Good command in both written and spoken English and Chinese.

Good organizational skill and analysis skill.

Candidate with lesser experience will be considered as Associate Technology Risk Manager