Technology Risk Manager (Information Security Control Division)

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 7h ago

Job No.: 499438
Employment Type: Full time
Departments: Information Technology Department
Job Functions: Information Technology

Roles and Responsibilities & Specific Requirements (Application Security):

Assist in reviewing IT initiatives and provide advisory from technology risk perspectives
Assist to establish and review policies, guidelines, procedures in application security area
Provide advisory and practical guidance to support technology risk and information security assessments, include vulnerability scanning, penetration test etc.
Conduct regular assessment on application security
Familiar with security testing tools e.g. Fortify, AppScan and Open Source Scanning tools, technologies on DevSecOps and industry good practice OWASP is preferable

Roles and Responsibilities & Specific Requirements (System Security):

Research and evaluate latest trend & technologies on information security and fintech area, such as FinTech, Artificial Intelligence, Big Data, Cloud Computing etc.
Conduct regular assessment on OS platform security & middleware software security
Plan and conduct security assessment in area of physical security (e.g.: data center security)
Assist to establish and review policies, guidelines, procedures in system security、physical security and fintech technology security area
Familiar with system platform operation and system architecture design is preferable

Roles and Responsibilities & Specific Requirements (Third-Party Security):

Drive security assessments of third-party vendor focusing on compliance with regulations, company policies, and internal controls.
Oversee information security risk management processes for onboarding and off-boarding of third-party vendor relationships.
Communicate to business units and cross-functional teams regarding third-party vendor risk issues and/or control gaps, and recommends remediation initiatives.
Provide awareness by conducting training on third-party vendor risk management framework.
Contribute to internal practice development initiatives and technology risk knowledge base
Stay informed about latest developments in third-party vendor risk management field.

Roles and Responsibilities & Specific Requirements (Information Security):

Assist senior manager to formulate and manage information security policies, standards and procedures.
Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and endpoint security review, etc.
Plan and carry out various information security assurance activities, such as computer accounts re-certification.
Review the initiation of security configuration changes, such as access rules, data leakage prevention policies.
Co-operates with system administrators to deploy various information security controls or tools, and take lead to conduct appropriate remedial action on security incidents.
Act as a subject matter expert to assist business units and cross-functional teams in identifying and mitigating information security risks and/or control gaps, and recommends remediation initiatives.

General Job Requirements:

Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.
Over 4 years of experience in IT security, technology risk, risk management, compliance or IT audit function, gained from other sizable financial institutions
Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CRISC is preferable.
Familiar with HKMA TMG-1, TM-E-1, PCI-DSS, ISO 2700-series or other security risk management framework is an advantage
Good command of written and spoken English with Mandarin is preferable and
Good communication and interpersonal skills;
Flexibility in traveling.
Candidate with less experience will be considered as Assistant Manager.

We offer competitive remuneration package and comprehensive fringe benefits including medical and life insurance, and different types of allowances to the right candidate. Interested parties, please submit your application online. For details, please visit our website http://www.bochk.com

To apply: https://careers.pageuppeople.com/798/cw/en/job/499438/technology-risk-manager-information-security-control-division=11232

Data collected would be used for recruitment purposes only. It might also be disclosed to our subsidiaries or Associated Companies to process the information for appointment. Applicants who do not hear from us within 8 weeks may consider their application unsuccessful and their data will be destroyed within 12 months of receipt.

Similar Jobs

IP (Trade Mark) Paralegal

Professional Services • Full Time • Central and Western District, Hong Kong, HK • HK$ 20,000 - HK$ 29,999 / month • 7h ago

Professional Services Full Time

The IP Paralegal will support the legal team in managing trade mark matters, ensuring accuracy and timeliness in documentation and filings. This role is ideal for someone with a keen eye for detail and a passion for IP i...

7h ago

Apply

RB&W CDD Manager

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 7h ago

Professional Services Full Time

Retail Banking and Wealth (RB&W) Non-Financial Risk – Customer Due Diligence (CDD) We are currently seeking a high caliber professional to join our team as RB&W CDD Manager. Principal responsibilities Oversee the...

7h ago

Apply

Business Compliance and Operational Risk Manager / Deputy Business Compliance & Operational Risk Manager (BWO)

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 7h ago

Professional Services Full Time

Job No.: 499677 Employment Type: Full time Departments: Personal Banking Risk And Integrated Management Department Job Functions: Risk Management, Compliance / Operational Risk Management Responsibilities Provide Adv...

7h ago

Apply

Audit Manager (Life Insurance)

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 7h ago

Professional Services Full Time

Job No.: 499756 Employment Type: Full time Departments: Group Audit Job Functions: Audit Responsibilities: Managing internal audit engagements in Insurance Business sector, mainly for BOC Life, from planning, risk as...

7h ago

Apply

Manager, RB&W Business Risk Management

Professional Services • Full Time • Mong Kok, Hong Kong, HK • 7h ago

Professional Services Full Time

Retail Banking and Wealth (RB&W) Non-Financial Risk – RB&W Business Risk Management We are currently seeking a high caliber professional to join our team as Manager, RB&W Business Risk Management. Principal...

7h ago

Apply

Operation Manager - Remittance

Professional Services • Full Time • Tai Kok Tsui, Hong Kong, HK • 15h ago

Professional Services Full Time

Job No.: 499114 Employment Type: Full time Departments: Bank-wide Operation Department Job Functions: Bank Operations Responsibilities Planning and managing of payment and clearing products according to the business deve...

15h ago

Apply

Assistant Operation Manager / Manager (Customer Due Diligence Division)

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 15h ago

Professional Services Full Time

Job No.: 495544 Employment Type: Full time Departments: Bank-wide Operation Department Job Functions: Accounting, Administration / Secretarial, Audit, Bank Operations, Customer Services, Dealing & Trading, Legal, Qua...

15h ago

Apply

Business Risk Assurance Manager

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 15h ago

Professional Services Full Time

Job No.: 499764 Employment Type: Full time Departments: Personal Banking Risk And Integrated Management Department Job Functions: Project Management, Risk Management, Policy Administration Position Summary and Object...

15h ago

Apply

Internal Fraud and Fraud Education Manager

Professional Services • Full Time • Mong Kok, Hong Kong, HK • 15h ago

Professional Services Full Time

Job Description / Principal Responsibilities Fraud awareness and knowledge training and public education for branch staff of HASE and on-us credit card holders respectively. From Training Need Analysis (“TNA”), training...

15h ago

Apply

Sales and Client Relationship Manager

Professional Services • Full Time • Hong Kong, Hong Kong, HK • 15h ago

Professional Services Full Time

Job No.: 499757 Employment Type: Full time Departments: BOCHK Asset Management Ltd Job Functions: Asset Management Responsibilities: Review and contribute to the client onboarding process to ensure adherence to compl...

15h ago

Apply