Assistant Manager / Senior Specialist (Risk Management)

Major Responsibilities

• Assist in coordination of risk management processes
• Assist in development and implementation of enterprise risk management framework, strategies, policy and procedures
• Coordinate with business units to establish a risk management process for information technology, operation, and cyber security, including risk identification, control design and implementation, and ongoing monitoring
• Assist in conducting risk assessment on existing and new services
• Assist business units in remediation of internal control weaknesses identified in audit reviews and assessments
• Provide support for regular reporting and metrics to present the risk posture of the company
• Assist in providing advice to all business units on the company’s new initiatives and existing operations from a risk and control perspective
• Assist in providing training to all staff members to promote a culture of risk awareness
• Perform other duties as assigned by supervisor(s)

Requirements

• University degree preferably in computer science, information technology, information system, business or related discipline
• Minimum 5 years of experience in technology / operational risk management, information security or IT auditing, preferably gained from financial institutions or professional consulting firms
• Expertise in various aspects of risk management as well as the services and operations of the financial sector
• Knowledge of risk management frameworks, relevant global / local regulatory requirements and industry standards such as HKMA CFI 2.0 framework, CSA STAR, ISO/IEC 27001 standard
• CISA, CISSP and/or other equivalent certifications preferred
• Team player with sound interpersonal, communication and documentation skills
• Good command of written and spoken English and Chinese