TECH RISK & CONTROLS LEAD

Join our team to play a pivotal role in mitigating technology risks and upholding operational excellence while driving innovation in risk management. As a Tech Risk & Controls Lead in Cybersecurity and Technology Controls, your primary responsibility will be to identify and mitigate compliance and operational risks in accordance with the firm's standards. You will offer subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls operate effectively and comply with regulatory, legal, and industry standards. Collaboration with various stakeholders, including Product Owners, Business Control Managers, and Regulators, will be essential in contributing to a comprehensive view of technology risk posture and its business impact. Your advanced knowledge of risk management principles, practices, and theories will enable you to implement innovative solutions and effectively lead a diverse team in a dynamic risk landscape. We are looking for a Regulatory and Industry Risk Assessment Lead with a strong background in audit, regulatory, and industry risk assessments to join our expanding Technology Risk and Controls organization. In this role, you will be the primary assessment lead, interfacing with internal and external auditors, compliance and risk teams, and internal stakeholders to advise on complex audits and ensure the firm's continuous compliance with key regulatory frameworks such as SOX, PCI, GLBA, HKMA, RBI, and other industry standards. The successful candidate will provide strategic direction and expert leadership in audit readiness, assessment practices, and control optimization. Your responsibilities will include driving efficient and effective execution of assessments aligned with organizational objectives, risk appetite, and regulatory compliance. You will lead the governance of issues raised from assessments, track concerns and findings resolution, and ensure timely closure of identified control deficiencies. Offering subject matter expertise in regulatory assessments to ensure adherence to applicable frameworks from HKMA or RBI and other relevant standards will be crucial. Effective identification, quantification, communication, and management of technology risks will be emphasized, with a focus on root cause analysis and resolution recommendations. Developing and maintaining robust relationships with LOB technologists, assessment teams, and data officers will be essential to facilitate cross-functional collaboration and progress toward shared goals. You will execute reporting and governance of controls, policies, issue management, and measurements, providing senior management with insights into control effectiveness and informing governance work. Proactively monitoring and evaluating control effectiveness, identifying gaps, and recommending enhancements to strengthen risk posture and regulatory compliance will be key responsibilities. Required qualifications for this role include a minimum of 5+ years of experience in technology risk management, information security, or related fields, with expertise in risk identification, assessment, and mitigation. Familiarity with risk management frameworks, industry standards, and financial industry regulatory requirements, such as HKMA, RBI, is required. Proficiency in data security, risk assessment & reporting, control evaluation, design, and governance is essential, along with a proven track record of implementing effective risk mitigation strategies. Demonstrated ability to influence executive-level strategic decision-making and translating technology insights into business strategies for senior executives is also necessary. Preferred qualifications include certifications such as CISM, CRISC, CISSP, or similar industry-recognized risk and risk certifications.,