Senior Officer, IT Process and Control

Job Responsibilities

• As part of the first line of defense control function of IT Department and support IT management to manage Technology and IT Operational Risk

• Work closely with Technology & Operational Risk management staff in the second line of defense to ensure consistency of policies and tools, as well as to report on results and issues

• Assist to follow-up remedial actions identified during the risk assessment process

• Maintain policies and procedures within IT Department

• Assist vendor management process and handle procurement requests

• Assist to conduct risk control self-assessments to identify and evaluate risks and associated controls for IT Department

• Support Business Continuity Management related activities for the IT Department

• As focal point and coordinator for external or independent reviews and examinations

Job Requirements

• At least 2 years of experience in information technology, risk, regulatory compliance, or similar risk & control function from the banking and finance industry

• Excellent communication skills and interpersonal skills to a wide range of individuals and groups and at different levels of seniority

• Self-starter who has experience in dealing with varieties of cultures

• Strong time management skills

• Open personality with effective communication skills

• Strong written English and Chinese, and speaking Mandarin

• Familiarity with HKMA SPM on E-banking (TM-E-1), Technology Risk Management (TM-G-1), BCP (TM-G-2), Outsourcing (SA-2)

• Degree in information system, computer science, information security, computer engineering or risk management qualifications desirable

• Certifications CISA, CISSP, CIA, CRISC or ITIL desirable