Technology Risk Manager: InfoSec & Third-Party Security

Bank of China (Hong Kong) Limited; Sha Tin; Vor Ort; HKD 700.000 - 1.100.000; Vollzeit

Zusammenfassung

Bank of China (Hong Kong) Limited seeks a Technology Risk Manager in the Information Security Control Division. The role covers application security, system security, and third-party security with emphasis on advisory, risk assessment, and policy implementation.

The candidate will review IT initiatives, conduct security assessments, and guide teams on remediation, while aligning with HKMA frameworks and industry best practices. Mandarin and travel readiness are preferred.

Qualifikationen

• 2 years of IT security, technology risk, risk management, compliance or IT audit experience in a sizable financial institution.
• Holding at least one recognized professional qualification under HKMA enhanced competency framework (CISA, CISSP, CRISC) is preferable.
• Familiar with HKMA TMG-1, TM-E-1, PCI-DSS, ISO 2700-series or similar security risk management frameworks is advantageous.
• Good command of written and spoken English; Mandarin preferable.
• Willingness to travel.

Aufgaben

• Assist in reviewing IT initiatives and provide advisory from technology risk perspectives.
• Establish and review policies, guidelines, and procedures in application security, system security, and third-party security.
• Provide advisory and practical guidance to support technology risk and information security assessments (vulnerability scanning, pen-testing).
• Conduct regular assessment on application, system and data center security; oversee remediation actions.
• Lead security assessments of third-party vendors and onboard/offboard processes; communicate risk issues to cross-functional teams.

Kenntnisse

Vulnerability scanning

Penetration testing

DevSecOps

OWASP

Security testing tools

Policy & procedure advisory

Information security awareness

Communication skills

Risk assessment

Third-party security

Ausbildung

Computer Science degree

Information Systems degree

Tools

Fortify

AppScan

Open Source Scanning Tools

Jobbeschreibung

Bank of China (Hong Kong) Limited seeks a Technology Risk Manager in the Information Security Control Division. The role covers application security, system security, and third-party security with emphasis on advisory, risk assessment, and policy implementation.

The candidate will review IT initiatives, conduct security assessments, and guide teams on remediation, while aligning with HKMA frameworks and industry best practices. Mandarin and travel readiness are preferred.