Manager / Assistant Manager, Technology Risk

Responsibilities:

• Assist in developing and improving the cybersecurity risk management framework, as well as reviewing and updating related policies and procedures

• Monitor and provide advice on Technology Risk covering cybersecurity and information security.

• Review new product proposals and IT projects from the technology risk perspective

• Formulate, enhance, and implement the bank's business continuity plan, as well as coordinate the conduct of drill tests

• Conduct technology risk control assurance reviews to ensure the first line of defence implements relevant technology risk controls consistently and effectively in daily operations

• Prepare reports for submission to the respective Committees

• Coordinate and handle internal and external audits on IT risk and as well as IT-related regulatory reviews and examinations

Requirements:

• Degree holder in Computer Science, Information Systems or related disciplines

• Professional qualifications of CSX-S, CSX-E, CISA, CISM, CRISC, CGEIT, CISSP, CCSP or other relevant qualifications are preferred

• Minimum 5 years of relevant experience in banking/finance industry

• Experience in technology risk management or auditing is an advantage

• Possess sufficient knowledge of banking operations and be familiar with applicable legal and regulatory requirements

• Good communication and business writing skills

(Candidate with less experience will be considered as Assistant Manager, Technology Risk)

We offer competitive remuneration commensurate with candidate’s background. If you look for a friendly and harmonious working environment with steady career progression, here is the right opportunity for you. Please submit your full resume with current and expected salary to the Human Resources Division by clicking “APPLY NOW” or visiting https://www.shacombank.com.hk/eng/about/career/Career.jsp.

We are an equal opportunity employer.

Applicants who are not contacted within 8 weeks may consider their application unsuccessful. Applications may be retained for 24 months for consideration of other suitable openings.

All personal data collected will be used for recruitment related purposes strictly in accordance with the Bank's personal data policies, a copy of which will be provided upon request by contacting our Personal Data Compliance Officer.