Responsibilities:

• To perform the Information Technology Governance and Control including the Infrastructure operations, cyber security, and project management.
• ŸWork closely with 1st line of defense teams to identify the control weaknesses, suggest practical recommendations for improvements and mitigating potential risks
• ŸPlan and conduct regular internal risk control self-assessments to evaluate appropriateness of IT controls
• ŸHandle IT-related regulatory, risk assessments and audits
• ŸDevelop and maintain a comprehensive remediation process to monitor the proper implementation of recommendations to address the issues identified by internal and external risk assessments and audits
• ŸProvide support to cross-functional teams on IT budget and resources planning
• ŸEstablish, review and verify the IT related policies, standards, and procedures documentation meets regulatory requirements

Requirements:

• University degree in Information Technology, Computer Science or equivalent
• ŸMinimum 5 years’ relevant experience in IT Infrastructure setup or Cyber security support
• ŸFamiliar with regulatory’s framework requirement such as HKMA TMG-1, TME-1, PCI-DSS is preferable.
• ŸDetail-minded, problem solving skills and well-organized with high level of integrity
• ŸProactive, strong problem solving skills and ability to work under pressure
• ŸStrong interpersonal relationship and leadership skill
• ŸWorking experience in banking industry is preferable
• ŸGood command of written and spoken English and Chinese (including Mandarin)
• ŸCandidate with more experience will be considered as Vice President, IT Governance & Control

We offer competitive remuneration package and promising career opportunities to the successful candidates. Interested parties, please send full resume with current & expected salary and the date of availability to The HR Division, G.P.O. Box 2535, HK , or by clicking Apply Now. Please quote reference on your application. Information provided will be treated in strict confidence and only be used for recruitment purposes. Personal data of unsuccessful applications will be destroyed 24 months after the completion of the recruitment and selection exercise.