Technology Risk Manager

We are seeking a highly skilled and experienced Technology Risk Manager to join our team. The successful candidate will be responsible for managing internal and external reviews/audits, monitoring and validating the closure of management actions, and performing review of new/revised processes.

• The ideal candidate will have a strong understanding of regulations and industry standards, as well as experience in identifying, assessing and advising on technology risks and control in a cross-discipline technology environment.
• They will also have expertise in IT Infrastructure development, support and management, with knowledge of technology platforms and solutions including virtualization, open source, multi-cloud environments, operating systems, databases, automated processes, platform and storage.

The successful candidate will be able to effectively communicate technical risks into business impact, drive cultural change towards risk awareness, and lead strategic operations support.

• Accountable for managing internal and external reviews/audits from audit planning to reporting and closing meeting.
• Responsible for monitoring and validating the closure of management actions, arising from internal and external reviews/audits, including regulator inspection reviews.
• Perform review of new/revised processes, provide risk opinion and ensure proper approvals and documentations.
• Collaborate with different technology teams to conduct post implementation review of new/revised processes to provide assurance.
• Prepare and develop technology risk insights (such as IT audit thematic and trend analysis) to be presented at forums.
• Engage and collaborate with technology stakeholders to proactively identify risks at a detailed and technical level and ensure that IT is effectively driving remediation activities and to continuously improve IT risk posture.
• Proactive in forging effective engagement with key stakeholders relating to risk & control matters.
• Drive automation (e.g., data analytics, AI/ML) for continuous auditing.
• Proactively staying ahead of regulatory changes and digital banking risks.
• Provide risk assessment and advisory as required.

• Possess a university degree related to information technology, information security, computer science, computer engineering or related fields.
• At least 12 years (SVP) / 8 years (VP) of experience preferably with exposure on technology risk management (in risk control and audit function) in IT infrastructure domain within financial services industry.
• Demonstrated experience in identifying, assessing and advising on technology risks and control in a cross-discipline technology environment within financial institution.
• Good understanding of regulations (from MAS, RBI, HKMA etc) and industry standards (e.g ISO, NIST, ITIL and cybersecurity framework etc).
• Experienced IT risk professional with exposure to Agile, DevOps, SRE and cloud technologies in either banking, IT risk management, security-related or IT audit (preferred).
• Subject matter expertise in IT Infrastructure development, support and management with the knowledge of technology platform and solutions including but not limited to the following areas: virtualization, open source, multi-cloud environments, operating systems, databases, automated processes, platform and storage, network (protocols, load balancing, routing, switching and management), outsourced vendor management.
• Knowledge of cybersecurity solution (IDS, IPS, firewall management, anti-virus, content filtering, secure email solutions, network sniffing, log management & analysis, forensics, VPN) will be an added advantage.
• Demonstrated experience of leveraging data and analytics to obtain stakeholder buy-in is a plus.
• Excellent organizational, problem solving, interpersonal and operating skills to effectively drive the IT Risk agenda with IT functions.
• Strong communication skills at all levels -- able to effectively communicate with IT and senior management, as well as line staff to drive IT risk mitigation initiatives and other IT risk management related areas.

• A challenging and rewarding role with opportunities for growth and development.
• A dynamic and collaborative work environment.
• A competitive salary and benefits package.

We are a leading financial institution dedicated to delivering innovative solutions to our customers. Our team is passionate about making a positive impact and we are committed to attracting and retaining top talent.