Regional Technology Risk & Controls professional

Job Description

Responsibilities Role will ensure that the Bank is in full compliance with the relevant technology policies, standards, and regulatory requirements. Role is to manage technology risks and cybersecurity effectively and to ensure that consistent risk management framework and practices are applied across the region. Assist to deliver strategic technology risk and cybersecurity transformation activities. Effective management of all technology risk and cybersecurity framework including technology policies and standards based on the Bank’s risk appetite. Ensure that all necessary legal and regulatory controls (e.g., HKMA SPMs and MAS TRMG) are in place from initial migration through service provisioning Lead the Bank’s technology risk and cybersecurity acceptance process whenever necessary and follow-up risk mitigation / prevention plans Coordinate with other IT teams to address control weaknesses, including design and implement new controls to address known issues. Qualifications Minimum of 10 years’ experience in technology risk, cybersecurity, or IT audit. Professional certifications such as CISA, CISM, CISSP, CRISC, CGEIT, and CDPSE. Solid understanding of regulatory requirements (e.g., HKMA SPMs and MAS TRMG) and industry standards (e.g., COBIT). Experience in designing and implementing new controls to mitigate identified risks Excellent communication and interpersonal skills including presentations and writing risk papers, with the ability to collaborate effectively with stakeholders at all levels. Analytical mindset and problem-solving abilities Ability to work in a fast moving high pressure environment and balancing multiple work streams. Experience in financial services or regulated environments is preferred Previous experience in cloud security is an advantage.