Assist in coordinating, planning, and managing technology risk and data management initiatives in alignment with Group standards, internal polices and regulatory requirements.
Support business units in the timely completion of technology risk and data management tasks, ensuring the quality standard including delivering briefings and responding to task-related inquiries.
Collaborate closely with business units, Group’s Information Technology Department to integrate technology risk management and data management practices into daily operations.
Conduct security control assessments and technology risk evaluations for 3 rd party service providers, including review of control evidence, risk remediation plan to ensure compliance with information security policies and regulatory expectations.
Assist in managing technology risk incidents by coordinating response efforts, facilitating root cause analysis, ensuring timely resolution, and maintaining comprehensive documentation for audit and reporting purposes.
Coordinate and organize regular training sessions, meetings to promote understanding and adherence to evolving technology risk and data management standards across business units.
Requirements:
Bachelor’s Degree holder in Information Technology, Computer Science or related field.
Add-on with professional certifications like CISA/CISM/CISSP/CCSP/CRISC.
Minimum of 2 years of relevant experience, preferably within banking, insurance, or financial institutions, in compliance technology (either first or second line of defense) or IT audit.
Knowledge of cloud computing, application security (mobile and web), and AI-related risk and security.
Familiar with and able to understand risk management framework and regulatory requirements (HKIA GL20, GL14, PCPD Privacy).
