A Bank in Hong Kong, operates Retail Branches, Securities Services Centres and Personal Loan Centres in Hong Kong, providing a wide range of financial services encompassing consumer and wholesale banking, wealth management, financial markets, securities brokerage and investment services.

Responsibilities

• Design IT business compliance assessment programs to evaluate the adequacy and effectiveness of the IT risk management and control functions of the Bank.
• Conduct business compliance assessments to ascertain IT operational and control risks are operated and managed at an acceptable level within the risk thresholds of the Bank.
• Compile control review reports to highlight major IT risk and compliance issues for management attention and necessary improvement actions.
• Assess the potential cybersecurity impact of emerging technologies and innovations.
• Advise and communicate regulatory rules and requirements on IT risk and control management to stakeholders.
• Review gap analysis reports to ensure compliance with new / revised regulatory rules and requirements and IT security / risk compliance within the Bank.

Requirements

• Degree holder in Computer Science or related fields
• Professional qualifications (e.g. CISA, CISM and CISSP)
• Minimum 6 years working experience in the IT compliance, risk management and audit professions, preferably in the banking industry
• Exposure to the areas of various computer platform, system development, IT security, quality assurance, infrastructures and networks
• Solid knowledge in IT risk, management and related regulatory rules and regulations