Your new role - Develop and maintain bank-wide policies and procedures on technology risk, information security risk, cyber resilience, and third-party risk.
- Conduct risk assessments to identify vulnerabilities and potential threats
- Implement risk mitigation strategies and actions to address identified risks
- Ensure end-to-end compliance with firm standards, regulatory requirements, and industry best practices.
- Provide guidance to internal stakeholders on the best practice in technology risk and compliance
- Provide guidance and lead initiatives on the continuous improvement of a firm's cyber defence posture.
- Explore new technologies and enablement to ensure the related risks are managed effectively and efficiently.
What you'll need to succeed - Degree in Information Security, IT, Risk Management, or related fields.
- 7 years+ of experience in IT Risk, cybersecurity, IT governance in a corporate or regulated environment.
- Relevant technology management and audit qualifications, e.g. CISM, CISSP, CISA or its equivalent
- Be familiar with local laws and regulations such as recent HKMA initiatives on cyber resilience and digital fraud / C-RAF / iCAST, practices in the IT industry, dynamics of the IT market and information security.
Good command of both Chinese and English languages
What you'll get in return What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV