Technology Risk Manager – IT Compliance & Security

Bank of China (Hong Kong) Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Bank of China (Hong Kong) Limited seeks a Technology Risk Manager to oversee IT operation risk across the Asia‑pacific Centre. Identify risks, report to supervisors, formulate rectification plans and monitor progress, and implement detection and control measures to safeguard production IT safety and effectiveness.

You will coordinate with internal and external parties on information security, system audits, production safety and compliance, lead incident investigations and root-cause analysis,

Qualifications

• Experience in incident management and IT internal control methodologies.
• Strong understanding of IT technology including networks and systems.
• Knowledge of production control, monitoring, and quality of deliverables.
• Familiar with regulatory requirements in Hong Kong and related practices.

Responsibilities

• Identify IT operation risks and report to supervisors and related parties.
• Formulate rectification plans and track progress.
• Implement effective detection and control measures for IT safety.
• Coordinate with internal and external parties on information security, audits, and compliance.
• Lead production incident investigations and root-cause analysis.
• Coordinate regulatory examinations and internal/external audits.
• Maintain emergency response plans and procedures for IT.
• Conduct policy compliance checks and promote safety training.

Skills

Incident management

IT governance

Managerial skills

Communication skills

English Chinese

Education

University degree or above

Job description

Bank of China (Hong Kong) Limited seeks a Technology Risk Manager to oversee IT operation risk across the Asia‑pacific Centre. Identify risks, report to supervisors, formulate rectification plans and monitor progress, and implement detection and control measures to safeguard production IT safety and effectiveness.

You will coordinate with internal and external parties on information security, system audits, production safety and compliance, lead incident investigations and root-cause analysis,