Senior Officer, IT Process and Control

Job Responsibilities

• As part of the first line of defense control function of IT Department and support IT management to manage Technology and IT Operational Risk
• Work closely with Technology & Operational Risk management staff in the second line of defense to ensure consistency of policies and tools, as well as to report on results and issues
• Assist to follow-up remedial actions identified during the risk assessment process
• Maintain policies and procedures within IT Department
• Assist vendor management process and handle procurement requests
• Assist to conduct risk control self-assessments to identify and evaluate risks and associated controls for IT Department
• Support Business Continuity Management related activities for the IT Department
• As focal point and coordinator for external or independent reviews and examinations

Job Requirements

• At least 2 years of experience in information technology, risk, regulatory compliance, or similar risk & control function from the banking and finance industry
• Excellent communication skills and interpersonal skills to a wide range of individuals and groups and at different levels of seniority
• Self-starter who has experience in dealing with varieties of cultures
• Strong time management skills
• Open personality with effective communication skills
• Strong written English and Chinese, and speaking Mandarin
• Familiarity with HKMA SPM on E-banking (TM-E-1), Technology Risk Management (TM-G-1), BCP (TM-G-2), Outsourcing (SA-2)
• Degree in information system, computer science, information security, computer engineering or risk management qualifications desirable
• Certifications CISA, CISSP, CIA, CRISC or ITIL desirable