Technology Risk Manager (IT Security) – Information Technology Department

Chiyu Banking Corp Ltd; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Chiyu Banking Corp Ltd in Hong Kong invites applications for a Technology Risk Manager (IT Security) within the Information Technology Department. The role focuses on designing, developing and implementing information security controls to protect technology assets.

Responsibilities include planning risk management strategies, formulating security policies, conducting IT risk assessments, guiding cross-functional teams, communicating risk issues, and delivering security awareness training to

Qualifications

• Degree in Computer Science or Information Systems or related discipline.
• HKIB qualifications such as Enhanced Competency Framework (ECF) and/or Certified Banker (CB) preferred.
• Over 3 years of experience in IT security, technology risk, risk management, or related areas.
• Experience working with regulators and external auditors.
• Professional qualifications under HKMA ECF such as CISA, CISSP, CISM, CCSP preferable.
• Good command of written and spoken English and Mandarin preferable.
• Independent, proactive and passionate about information security.

Responsibilities

• Participate in Information and Cyber Security projects for the Design, development and implementation.
• Assist in planning of technology related risk management strategies, processes and work plans.
• Formulate and manage information securitypolicies, standards and procedures.
• Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and security review.
• Assist businessunits and cross-functional teamsin identifying and mitigating information security risks.
• Communicate to business units and cross-functional teams regarding information security risk issues and/or control gaps, and recommends remediation initiatives.
• Create and manage information security awareness training programs for all employees, contractors and approved system users.

Skills

IT security

Risk management

System development

Education

Bachelor's degree in Computer Science or Information Systems

Job description

Technology Risk Manager (IT Security) – Information Technology Department

Participate in Information and Cyber Security projects for the Design, development and implementation.

Assist in planning of technology related risk management strategies, processes and work plans.

Formulate and manage information securitypolicies, standards and procedures.

Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and security review.

Assist businessunits and cross-functional teamsin identifying and mitigating information security risks.

Communicate to business units and cross-functional teams regarding information security risk issues and/or control gaps, and recommends remediation initiatives.

Create and manage information security awareness training programs for all employees, contractors and approved system users.

Requirements:

Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.

HKIB banking professional qualifications such as Enhanced Competency Framework (ECF) and/or Certified Banker (CB) preferred.

Over3years of experience in IT security, technology risk, risk management, system development management.

Demonstrated experience working with the regulators and external auditor.

Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CISM, CCSP is preferable.

Good command of written and spoken English and Mandarin is preferable.

Independent, strong self-initiative and with passion in information security and cyber security professional.

Information provided will be treated in strict confidence and only be used for recruitment purposes. All personal data of unsuccessful applicants will be destroyed after the recruitment exercise. A copy of Personal Information Collection Statement is available upon request.