Risk and Compliance - Security & Fraud Risk 

Hang Seng's Risk and Compliance ("RKM") strives to maintain a well-balanced risk profile for the Bank while enabling businesses to thrive. Our team actively manages a varied and dynamic range of risk types. We are dedicated to collaborate with businesses, other functional units and regulatory bodies to develop and implement robust and customized risk management frameworks and measures to maintain the strong market position of the Bank. 

Security and Fraud Risk protects our customers, staff and the Bank from security and fraud risk through deployment of a balanced mix of technology and personnel, provides a safe environment and peace of mind to our customers and staff, and effective use of fraud intelligence, real time monitoring system and timely investigation services. 

We are currently seeking a high caliber professional to join our department as Senior Information Security Risk Manager. 

Principal responsibilities 

• Lead the development, implementation and maintenance of the cyber security risk management framework and ensure its effectiveness
• Provide expert advice and guidance to senior executives on cyber security risk profile of the bank
• Provide guidance, consultancy and support to businesses and functions in identifying and managing cyber security risk and controls
• Keep abreast of the latest cyber security threat landscape, evaluate the potential impact to the bank
• Perform independent reviews and provide assurance on cyber security risk 

Requirements 

• University degree in Computer Science or related disciplines
• Over 8 years’ experience in IT security and risk management area
• Strong technical or security skills related to IT applications and infrastructure in financial institution
• Solid experience in information systems security assessment, intelligence and threat management, and cyber security incident handling
• Good knowledge in banking environment
• Knowledge and experience in Fintech is desirable
• Strong knowledge of banking regulations / guidelines relating to cyber security and technology risk management
• Strong self-motivation, with good leadership, communication, interpersonal and analytical skills
• Good command of both spoken and written English and Chinese; Mandarin is an advantage
• Possess professional qualification such as CISM, CISA and CISSP will be an advantage
• Great sense of ownership and servicing mindset to ensure efficient and effective customer service processes

To apply, please read carefully the ‘Note on Collection of Personal Data and Information’ available in the careers page of our Hang Seng website : www.hangseng.com and send your resume by clicking "Apply Now" for our processing. You can also visit our website for further details about career opportunities with the Bank. Applicants who are not contacted within one month may consider their applications unsuccessful.

All information provided by applicants will be used only for recruitment purposes and will be used strictly in accordance with the Bank's personal data policies, a copy of which may be obtained by the applicant upon request. Unless otherwise instructed in writing by the applicant concerned, applicants may be considered for other suitable positions within the Bank and its related companies. The personal data of unsuccessful job applicants may be retained for a maximum of two years from the date when the job application is rejected and such data may be retained for a longer period if there is a subsisting reason that obliges the Bank to do so, after which the personal data will be destroyed.

A Career with Hang Seng Bank

Hang Seng is committed to service excellence. Our people are our most important asset and play a vital role in our efforts to continually enhance our performance for customers and provide best-in-class products and services. We seek to attract high-calibre talent by offering a dynamic working environment, good career development opportunities and competitive compensation packages.