Manager (Technology Compliance)

Hong Kong Interbank Clearing Limited

Hong Kong Interbank Clearing Limited (hereinafter referred to as “the Company”) is a private organization jointly owned by the Hong Kong Monetary Authority (HKMA) and The Hong Kong Association of Banks. The Company’s key objective is to develop and operate a safe and efficient multi-currency and multi-dimensional financial infrastructure in Hong Kong for:

• large-value interbank fund transfers denominated in HKD, USD, Euro and RMB;
• interbank money settlement of equity and debt securities transactions in Hong Kong via the linkages with the Hong Kong Securities Clearing Company Limited and the HKMA’s Central Moneymarkets Unit (CMU) system;
• small-value interbank fund transfers denominated in HKD and RMB via the HKD and RMB Faster Payment System; and
• interbank clearing and/or money settlement of paper cheques and various types of electronic payments in Hong Kong.

The Company is also the operator of the HKMA’s CMU system.

Apart from interbank clearing-and-settlement services, the Company and its subsidiaries also support the HKMA and the financial industry to foster the development of the financial technology (“FinTech”) ecosystem in Hong Kong.

We are looking for a suitable candidate to take up the following job position.

Manager (Technology Compliance)

Major Responsibilities

• Report to the Senior Manager or Department/Division Head on matters related to technology compliance, cyber security, and information security
• Establish, update, and maintain the unit’s policies, procedures, guidelines, and plans, particularly those related to regulatory, compliance, and law-enforcement matters
• Participate in cyber or information security drills initiated by industry bodies or regulators
• Assist the Head in liaising and communicating with designated authorities or regulators
• Assist in arranging and/or handling incident reporting matters related to IT, cybersecurity, and system incidents
• Keep abreast of the latest cyber security-related law-enforcement, regulatory, and/or industry requirements to facilitate the identification of potential enhancement areas
• Communicate and work with other departments/divisions on cyber and information security controls and enhancement matters
• Arrange and/or conduct computer-system security risk assessments, technical assessments, audits, and reporting according to the scope and requirements
• Perform any other ad hoc duties or projects as assigned

Requirements

• University degree, preferably in information technology, information/cyber security, computer science, or a related discipline
• Minimum 5 years of experience in information/cyber security or technology risk management. Candidates with less experience who meet the requirements may be considered for the deputy manager position
• Good understanding of technology risk management and cyber security best practices, with broad knowledge of fintech, data privacy, and/or industry practices
• Knowledge of ISO 27001, CSA STAR, the HKMA SPM, the CFI 2.0 framework, technology risk management, and cyber security-related guidelines
• CISA, CISM, CDPSE, CRISC, CISSP, CEH, CCSP, CREST, and/or other cyber resilience-related certifications preferred
• Team player with sound interpersonal and communication skills
• Red/Blue Team knowledge and experience are an advantage
• Good problem-solving and analytical skills
• Good command of written and spoken English and Chinese

How to Apply

Interested parties please send your curriculum vitae stating your current and expected salaries, and the contact phone number to the Human Resources Division, Unit B, 25/F, MG Tower, 133 Hoi Bun Road, Kwun Tong, Kowloon  by clicking the "Apply Now" button below.

All applications and personal information collected will be treated in strict confidence and only be used for the purpose of recruitment and selection.  The information collected will be accessed by our authorized personnel only.  Those applicants not contacted by the Human Resources Division within two months from their application date should consider their applications filed for future reference which will be retained for one year for possible future job matching, and will be destroyed after the expiry of one year.