Manager to Senior Manager, Technology Risk (Ref: RMD-TRC-M/SM-FMBM-ICBCA)

Industrial and Commercial Bank of China ( Asia ) Limited; Hong Kong Island; On-site; HKD 600,000 - 1,200,000; Full time

Job summary

A leading financial institution is seeking a Manager to Senior Manager, Technology Risk for its Hong Kong office. This role focuses on managing technology-related risks, ensuring compliance with IT policies, and conducting risk assessments. Candidates should possess a degree in Computer Science or related fields and have extensive experience in IT Security. Strong communication skills and familiarity with technology infrastructure are essential for success in this position.

Qualifications

• 6 to 8 years of relevant work experience in IT Security and risk control.
• Proven experience in writing policies, procedures, and reports.
• Familiarity with infrastructure platforms such as Data Centre Operations.

Responsibilities

• Perform technology risk management processes.
• Ensure compliance with IT control policies and governance.
• Implement risk issue management procedures.
• Plan control and risk assessment programs.

Skills

Communication skills

Interpersonal skills

Technical information security

Education

University degree in Computer Science, IT or related disciplines

Tools

MS Word

Excel

Job description

Manager to Senior Manager, Technology Risk (Ref: RMD-TRC-M/SM-FMBM-ICBCA)

Responsibilities:

• Perform the technology risk management process which identifies, measures, monitors and controls technology-related risks of existing/new systems and processes.
• Ensure awareness of, and compliance with, the Bank’s IT control policies, and to provide report with recommendations, if any, after investigation of any technology-related incidents.
• Ensure all operational activity is completed within the prescribed governance structure and that statutory/ governance exercises are completed robustly.
• Implement risk issue management procedures to ensure the required policies and guidelines are enforced in daily operation.
• Recommend and implement remedial actions and control measures.
• Plan and work with the technology team and any concerning parties to design and conduct the control and risk assessment program.

Requirements:

• University graduate with major in Computer Science, IT or related disciplines, with professional qualification such as CISSP, CISM or CISA is preferred.
• At least 6 to 8 years of relevant work experience in IT Security and risk control area.
• Solid experience in handling technical information security issues and good understanding of business processes and related regulations.
• Proven experience in writing policies, procedures and reports is a must.
• Familiar with infrastructure platforms, e.g. Data Centre Operations, Network Services (Voice / Data), Messaging, Desktop technology, Distributed Servers (UNIX and Windows), Mainframe etc.
• Work independently with good communication and interpersonal skills.
• Conversant with MS Word, Excel & Chinese character input.
• Good command of written & spoken English and Chinese including Putonghua.

To apply, please send full resume including present and expected salary to

Personal data collected will be used for recruitment purposes only