Technology Risk Manager: Cybersecurity & Audit

Shanghai Commercial Bank Ltd

Hong Kong

On-site

HKD 500,000 - 800,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Shanghai Commercial Bank Ltd. is seeking a seasoned Technology Risk professional in Hong Kong to help advance the cybersecurity risk management framework and related policies. You will monitor technology risk, review IT projects, and ensure effective business continuity planning with drills.

The role requires strong communication and regulatory awareness with at least five years of banking risk experience. Candidate qualifications include a CSX/CISSP-like credential and relevant banking risk

Qualifications

Degree holder in Computer Science, Information Systems or related discipline.
Professional qualifications such as CSX-S, CSX-E, CISA, CISM, CRISC, CGEIT, CISSP, CCSP or equivalent preferred.
Minimum 5 years of relevant experience in banking/finance.
Experience in technology risk management or auditing is advantageous.

Responsibilities

Assist in developing and improving the cybersecurity risk management framework and update policies.
Monitor and advise on Technology Risk covering cybersecurity and information security.
Review new IT projects from the technology risk perspective.
Formulate, enhance and implement the bank's business continuity plan and coordinate drill tests.
Conduct risk control assurance reviews to ensure frontline controls are implemented daily.
Prepare reports for submission to Committees.
Coordinate and handle internal and external IT risk audits and regulatory reviews/examinations.