We use cookies to enhance your experience on our website. Please read and confirm your agreement to our Privacy Policy and Terms and Conditions before continue to browse our website.
Job No.: 498875 Employment Type: Full time Departments: Information Technology Department Job Functions: Information Technology
Roles and Responsiblities
Responsible for the planning, management and daily operation of technology risk management
Responsible for communicating and cooperating with internal working units to solve any issues related to information security/technology risk management of overseas branches and affilated organization.
Conduct regular IT risk and compliance assessment in overseas branches and coordinate overseas branch to perform technology risk self-assessment.
Collect key risk indicator information from overseas branches and perform anlaysis.
Responsible for supervising overseas branch and affilatd organization on those issues arising from any independent assessment from regulatory inspections, external or internal audit, or other third parties and tracking their remediation activities
Influence and drive oversea branches and affilated organization on technology risk management initiatives in alignment with group policies and standards
Proactively communicate with overseas branches and affilated organization to understand update-to-date local regulatory requirement.
Keep abreast with latest threats, vulnerabilties, mitigation and industry best practices
Conduct technology risk and information security awareness training to staffs and technology risk managers in oversea branches
Job Requirments
Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.
Over 6 years of experience in IT security, technology risk, risk management, system development management, compliance or IT audit function, gained from other sizable financial institutions. Candidate with less experience will be considered as Analyst
Demonstrated experience working with the regulators in the region, articulate in local regulations and laws pertaining to IT Risk would be an advantage
Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Manager (CISM) , Certified in Risk and Information Systems Control (CRISC) , Certified Internal Auditors (CIA) is preferable.
Good command of written and spoken English with Mandarin is preferable.
Flexibility in traveling
Independent and strong self-initiative.
We offer competitive remuneration package and comprehensive fringe benefits including medical and life insurance, and different types of allowances to the right candidate. Interested parties, please submit your application online. For details, please visit our website http://www.bochk.com
Data collected would be used for recruitment purposes only. It might also be disclosed to our subsidiaries or Associated Companies to process the information for appointment. Applicants who do not hear from us within 8 weeks may consider their application unsuccessful and their data will be destroyed within 12 months of receipt.