Tech Risk Specialist

We are seeking a seasoned Tech Risk Specialist to join our team. As a key member of the Operational Risk Management (ORM) unit, you will play a pivotal role in developing and implementing a comprehensive risk management program for technology.

Your primary responsibility will be to continuously refine and scale the Technology and Operational Resilience program, guiding first-line execution and providing independent risk challenge. You will work closely with stakeholders across Engineering, Product, Risk, Compliance, Internal Audit, Legal, Finance, and HR.

The ideal candidate is a process-minded thinker with a strong drive for improvement and career growth. They should possess an understanding of cloud technologies and knowledge of blockchain will be highly advantageous. The successful candidate will report to the Senior Risk Manager of Technology Risk.

• Collaborate with internal stakeholders to proactively identify, escalate, assess, and mitigate technology risks.
• Provide oversight of Technology Incidents and Issues, and partner with 1LOD stakeholders to enhance related processes and ensure effective oversight.
• Refine and scale the 2LOD Technology and Operational Resilience program, including providing practical templates to enable 1LOD teams to assess and manage their resilience and continuity capabilities.
• Oversight of Technology Architecture & Asset Management and Technology Delivery domains.
• Lead the Technology Risk and Control Self-Assessment (RCSA) process from a 2LOD perspective, ensuring adherence to the ERM RCSA methodology, and providing effective challenge and oversight of 1LOD Technology risks and controls.
• Support the Technology Key Risk Indicators (KRIs) definition, monitoring, and reporting.

• Fluent in Mandarin Chinese, with the ability to communicate technical concepts clearly in both written and verbal forms.
• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum 5 to 8 years of experience or more in Technology Risk, Operational Resilience or BCM management; experience within fintech, crypto, blockchain, and/or cloud-native companies is preferred.
• Proven track record in project and stakeholder management, independently conducting technology risk-control assessments, control testing, incident and issue management, and driving remediation efforts.
• Strong understanding of Technology Resilience, Technology Delivery (SDLC and CI/CD), Business Continuity Management and Disaster Recovery.
• Knowledge of industry best practices and frameworks for technology risk and BCM (e.g., NIST, ISO 22301, ISO 27001).
• Experience working with Governance, Risk, and Compliance (GRC) systems in a global environment.
• Excellent communication and presentation skills, with the ability to tailor reports for diverse audiences.
• Demonstrated ability to collaborate effectively across all levels of a global organization.
• Comfortable working in a dynamic, fast-paced, and evolving environment, with a proactive approach to pilot initiatives and continuous improvement.
• Relevant certifications such as CISA, CISM, CISSP, CBCP, or ISO 22301 Lead Implementer are a strong plus.

• Competitive total compensation package.
• L&D programs and Education subsidy for employees' growth and development.
• Various team building programs and company events.
• Wellness and meal allowances.
• Comprehensive healthcare schemes for employees and dependents.