This role is open to candidate with experience in either technology risk, operational risk, or both. Job scope is designated based on the candidate’s experience and career aspiration.

• Perform technology &/or operational risk analysis & assessment for new businesses, products, or systems as appropriate through review of the underlying systems / processes to identify the associated risks and providing comment on risk mitigation or control measures
• Review policies and procedures, self-assessment and other documents for the purpose of identifying compliance gaps and potential risks.
• Review and enhance the existing risk related policies and procedures.
• Plan and conduct thematic review of focused risk area or ad hoc risk management / mitigation tasks assigned from Head Office
• Perform self-assessment, gap analysis against internal and/or regulatory requirements in order to identify any risk issue & ascertain the associated risk exposure
• Review and assist the investigation of IT/Operational  incidents and identify their risk to the bank. Track and report the implementation status of the remediation plans on continuously basis.
• Challenge and advise IT department and business/supporting units regarding technology and/or operational control matters.
• Challenge and review the business continuity plan and/ or disaster recovery plan to ensure bank’s robustness on contingency management
• Prepare management reports on risk assessment, review results or regular risk reporting
• Participate in internal / external assessment or audit in respect of operational /technology risks related areas
• Review and give comments on risk exception requests

• Candidate with Technology risk background:
• Minimum 5 years of experience in information technology, or 3 years of experience in technology risk management or cybersecurity.
• Proven experience in IT security assessment, remediation, implementation and validation of technical safeguards
• Candidate with Operational risk background:
• Minimum 5 years of experience in Banking or Financial Services, or 3 years of experience in operational risk management.
• University Degree or above. More experienced candidate will be considered for Senior Manager grade.
• Advantage for candidate with
• Experience in private wealth management or private banking business
• ECF professional level on ORM / Cybersecurity (or equivalent cybersecurity certification like such as CISSP, CRISC, CISA, CISM)
• Familiar with the regulatory requirements of operational / technology risk management and cybersecurity (e.g. HKMA, SFC, MAS)
• Capable of working independently and being a good team player. Good analytical and time management skills. Multi-tasking and prioritization of tasks are expected.
• Proficient in written, spoken English and Chinese.  Fluent in Mandarin speaking is necessary.

Interested parties please send your resume with current & expected salary by clicking “Apply Now” button.
All information provided by applicants will be treated in strict confidence and handled confidentially for recruitment purpose only. Applicants who are not contacted within 8 weeks may consider their application unsuccessful and their data will be destroyed within 12 months.

*We do not accept solicitations from recruitment agencies*

Ping An Bank Co., Ltd. (SZSE stock abbreviation: PAB; stock code: 000001) is a nationwide joint-stock commercial bank headquartered in Shenzhen. Ping An Insurance (Group) Company of China, Ltd. is the controlling shareholder of Ping An Bank. As of December 2018 Ping An Bank provided diversified financial services to clients through 80 branches and 1,057 outlets across China.

We are setting up a new branch in Hong Kong and sincerely inviting high calibre professionals to join us for the following position.