Technology Risk Manager (Information Security Control Division) | Hong Kong, HK

Bank of China (Hong Kong) Limited • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Roles and Responsibilities & Specific Requirements (Application Security):

• Assist in reviewing IT initiatives and provide advisory from technology risk perspectives

• Assist to establish and review policies, guidelines, procedures in application security area

• Provide advisory and practical guidance to support technology risk and information security assessments, include vulnerability scanning, penetration test etc.

• Conduct regular assessment on application security

• Familiar with security testing tools e.g. Fortify, AppScan and Open Source Scanning tools, technologies on DevSecOps and industry good practice OWASP is preferable Roles and Responsibilities & Specific Requirements (System Security):

• Research and evaluate latest trend & technologies on information security and fintech area, such as FinTech, Artificial Intelligence, Big Data, Cloud Computing etc.

• Conduct regular assessment on OS platform security & middleware software security

• Plan and conduct security assessment in area of physical security (e.g.: data center security)

• Assist to establish and review policies, guidelines, procedures in system security、physical security and fintech technology security area

• Familiar with system platform operation and system architecture design is preferable

Roles and Responsibilities & Specific Requirements (Third-Party Security):

• Drive security assessments of third-party vendor focusing on compliance with regulations, company policies, and internal controls.

• Oversee information security risk management processes for onboarding and off-boarding of third-party vendor relationships.

• Communicate to business units and cross-functional teams regarding third-party vendor risk issues and/or control gaps, and recommends remediation initiatives.

• Provide awareness by conducting training on third-party vendor risk management framework.

• Contribute to internal practice development initiatives and technology risk knowledge base

• Stay informed about latest developments in third-party vendor risk management field.

Roles and Responsibilities & Specific Requirements (Information Security):

• Assist senior manager to formulate and manage information security policies, standards and procedures.

• Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and endpoint security review, etc.

• Plan and carry out various information security assurance activities, such as computer accounts re-certification.

• Review the initiation of security configuration changes, such as access rules, data leakage prevention policies.

• Co-operates with system administrators to deploy various information security controls or tools, and take lead to conduct appropriate remedial action on security incidents.

• Act as a subject matter expert to assist business units and cross-functional teams in identifying and mitigating information security risks and/or control gaps, and recommends remediation initiatives.

General Job Requirements:

• Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.

• Over 4 years of experience in IT security, technology risk, risk management, compliance or IT audit function, gained from other sizable financial institutions

• Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CRISC is preferable.

• Familiar with HKMA TMG-1, TM-E-1, PCI-DSS, ISO 2700-series or other security risk management framework is an advantage

• Good command of written and spoken English with Mandarin is preferable and

• Good communication and interpersonal skills;

• Flexibility in traveling.

• Candidate with less experience will be considered as Assistant Manager.

If you are applying for in-scope position(s) under the Mandatory Reference Checking Scheme (i.e., A role carrying out regulated activities licensed by the IA, SFC & MPFA), you are required to undergo the Mandatory Reference Checking. Our responsible recruiter will inform you the details of the MRC process and the requirements in due course. For details, please click here .

Similar Jobs

Equity Research Analyst-Greater China Technology | Hong Kong, HK

Taikang Asset Management (Hong Kong) Co. Ltd. • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Information Technology Full Time

Taikang Asset Management (HK) Co., Ltd. (“TKAMCHK") is a 100% subsidiary of TKAMC, now TKAMCHK is looking for professionals who have good understanding of the asset management or financial services industry, and capabili...

3h ago

Apply

Technology - Business Analyst | Hong Kong, HK

Accenture • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Information Technology Full Time

Let there be CHANGE Ready to fast-track your career? Ready to solve complex problems? Advance your skills? Deliver next-generation technology solutions? Join Accenture and help transform leading organizations and communi...

3h ago

Apply

Technology - Senior Project Manager | Hong Kong, HK

Accenture • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Information Technology Full Time

3h ago

Apply

Technology - SAP Delivery Lead/ Project Manager | Hong Kong, HK

Accenture • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Information Technology Full Time

3h ago

Apply

Technology - SAP Consultant - Asso. Manager (MM/SD) | Hong Kong, HK

Accenture • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Information Technology Full Time

3h ago

Apply

Business Technology Manager (Senior Manager/Manager/Assistant Manager) | Hong Kong, HK

Bank of China (Hong Kong) Limited • Full Time • Hong Kong, Hong Kong, HK • 3h ago

Information Technology Full Time

Responsibility: • Perform business and user requirement analysis • Acting as the primary liaison between business and IT units • Manage IT project implementation • Manage Business Technology team members (applicable for...

3h ago

Apply

Assoc, BackEnd Eng, WRB Tech

Standard Chartered Bank • Full Time • Kwun Tong, Hong Kong, HK • 9h ago

Information Technology Full Time

Job Summary • We’re seeking a highly skilled and experienced Java Backend Engineer to join our dynamic team. You’ll be responsible for designing, developing, and maintaining robust, secure and efficient financial syst...

9h ago

Apply

AI System Architect / System Analyst, Financial Technonlogy

Industrial and Commercial Bank of China (Asia) Limited • Full Time • Hong Kong, Hong Kong, HK • 15h ago

Information Technology Full Time

AI Perform software development and testing Develop and maintain framework/standards AI System Architect / System Analyst（Financial Technology） Job Responsibilities Participate in the application architectural design i...

15h ago

Apply

Assistant Manager, IT Audit

Dah Sing Financial Group • Full Time • North Point, Hong Kong, HK • 15h ago

Information Technology Full Time

Job Purpose: Carry out IT audit assignments to evaluate operations, technology, and compliance controls, highlighting audit findings and recommendations for management’s attention. Main Responsibilities: Lead and execu...

15h ago

Apply

Business Analyst, Application Promotion Section (Securities Business)

Industrial and Commercial Bank of China (Asia) Limited • Full Time • Hong Kong, Hong Kong, HK • 15h ago

Information Technology Full Time

Business Analyst Securities System Job Responsibilities Responsible for project management, User Requirement Analysis, Application testing, User Support and Application Support User Support Work with IT department on pro...

15h ago

Apply