Technology Risk Manager (Internal Control & Production Safety Management)

Bank of China (Hong Kong); Hong Kong; In loco; HKD 600.000 - 840.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical and life insurance

Allowance packages

Descrizione del lavoro

Bank of China (Hong Kong) is recruiting an experienced Associate Technology Risk Manager / equivalent for the IT Risk team. The role focuses on identifying risk in IT operations, implementing controls, and coordinating with regulators and audits to ensure compliance in a banking environment.

The candidate should have a university degree, 5+ years in banking or IT, and professional certifications such as CISA/CISSP/PMP are preferred.

Competenze

• Knowledge of IT internal controls and governance.
• Experience in incident management and IT risk.
• Familiarity with financial system technology and auditing.

Mansioni

• Identify existing and potential risks in IT operation and report to supervisor.
• Implement detection and control measures to strengthen IT operation safety and effectiveness.
• Coordinate with internal and external parties on information security, system audit, production safety and compliance.
• Conduct production incident investigations and assist root-cause analysis and rectifications.
• Coordinate regulatory examinations and internal/external audits and monitor rectifications.
• Formulate and maintain IT department emergency response plans and procedures.
• Perform compliance checks of department policies and monitor reviews.
• Provide training to promote production safety awareness.

Conoscenze

CISA

CISSP

PMP

Formazione

University Degree or above

Descrizione del lavoro

• Identify the existing and potential risk in IT operation, report the risk to supervisor and related parties in time, formulate the rectification plan and follow up.
• Implement effective detection and control measures to strengthen the production operation safety and effectiveness of IT Department
• Responsible for the communication and cooperation with internal and external parties to solve the issue related to information security, system audit, production safety and compliance.
• Perform production incident investigation, assist to analysis the root cause and the rectification required.
• Co-ordinate the regulatory examination and internal/external audit and monitor the status of the rectification.
• Formulate and maintain the emergency response plan and procedure of IT department
• Perform compliance checking of the departments' policies and procedures and monitor the review status.
• Carry out training to promote awareness related to production safety

Responsibilities

• Identify the existing and potential risk in IT operation, report the risk to supervisor and related parties in time, formulate the rectification plan and follow up.
• Implement effective detection and control measures to strengthen the production operation safety and effectiveness of IT Department
• Responsible for the communication and cooperation with internal and external parties to solve the issue related to information security, system audit, production safety and compliance.
• Perform production incident investigation, assist to analysis the root cause and the rectification required.
• Co-ordinate the regulatory examination and internal/external audit and monitor the status of the rectification.
• Formulate and maintain the emergency response plan and procedure of IT department
• Perform compliance checking of the departments' policies and procedures and monitor the review status.
• Carry out training to promote awareness related to production safety

Requirements

• University Degree or above.
• At least 5 years of banking or IT professional experience, with 1 years of experience in managerial position,
• Having good knowledge in production control and monitoring and able to make professional opinion on the deliverables' quality and completeness.Strong business and general managerial skills.
• Knowledge in system development, quality management and auditing in financial system technology.
• Familiar with regulatory requirement and industry practices in Hong Kong. Relevant knowledge in Mainland China and Southeast Asia will be an advantage.
• Demonstrated experience in incident management and familiar with the methodology of IT internal control.
• Deep understanding of IT technology, including networking operating system, programming language, development and testing methodology.
• CISA, CISSP and PMP is preferable.
• Good command in both written and spoken English and Chinese.
• Good organizational skill and analysis skill.
• Candidate with lesser experience will be considered as Associate Technology Risk Manager

We offer competitive remuneration package and comprehensive fringe benefits including medical and life insurance, and different types of allowances to the right candidates.

Data collected would be used for recruitment purposes only. Applicants who do not hear from us within 8 weeks may consider their application unsuccessful and their data will be destroyed within 12 months of receipt.