Technology Risk Manager – Cybersecurity & IT Controls

Industrial and Commercial Bank of China; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Industrial and Commercial Bank of China (Asia) Limited (ICBC (Asia)) is seeking a Senior Officer to Manager, Technology Risk to lead technology risk management for existing and new systems, processes and initiatives. The role requires strong policy writing, reporting, and collaboration with technology teams to ensure control effectiveness.

The ideal candidate will have 5–7 years IT/cybersecurity experience, familiarity with HKMA TM-G-1, TM-G-2, SA-2, C-RAF, SFC and PDPO, and possess English and

Qualifications

• Bachelor's degree in Computer Science, IT or related field; professional qualifications such as CISSP/CISM/CISA/CREST CPSA/CRT/CEH preferred.
• At least 5–7 years of IT/cybersecurity, e-Banking security, BCP/DR or related risk control experience.
• Solid experience handling technical information/cybersecurity issues and understanding of regulatory requirements (HKMA TM-G-1, TM-G-2, SA-2, C-RAF, STDB, SFC, PDPO).
• Must have hands-on experience writing policies, procedures and reports.

Responsibilities

• Perform technology risk management for existing/new systems, processes and initiatives.
• Ensure compliance with IT control policies and report recommendations after investigations.
• Conduct risk-hazard inspections and ensure adherence to bank policies.
• Provide suggestions to enhance technology risk controls and participate in planning.

Skills

Cybersecurity

IT risk management

Policy writing

Communication skills

Independent work

English & Chinese

Education

Bachelor's degree in Computer Science or IT

Certifications such as CISSP/CISM/CISA/CEH

Tools

UNIX/Windows servers

Mainframe knowledge

Data Center operations

Network services

ISO27001 knowledge

Job description

Industrial and Commercial Bank of China (Asia) Limited (ICBC (Asia)) is seeking a Senior Officer to Manager, Technology Risk to lead technology risk management for existing and new systems, processes and initiatives. The role requires strong policy writing, reporting, and collaboration with technology teams to ensure control effectiveness.

The ideal candidate will have 5–7 years IT/cybersecurity experience, familiarity with HKMA TM-G-1, TM-G-2, SA-2, C-RAF, SFC and PDPO, and possess English and