Technology Risk Management Officer

Job description

The CRO department develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance limits for the various business units, with the goal of achieving sustainable growth for the company. This also includes compliance with technology risk frameworks and related aspects.

Tasks

- Works closely with internal and external stakeholders, including colleagues in technology risk management, business transformation, IT, compliance, and information security (both in the APAC region and globally). - Acts as the technology risk management representative for the second line of defense in banking projects, providing advice on requirements and potential solutions to meet regulatory expectations. - Serves as the point of contact for interpreting and advising on the technological aspects of regulations (primarily SG/HK); key regulatory authorities include MAS, HKMA, ABS, HKAB, SFC, etc.

Regulatory responsibilities and risk management

- Demonstrates appropriate values and behaviors, including, but not limited to, standards of honesty and integrity, diligence and conscientiousness, fair dealing (treating customers fairly), conflict management, competence and continuous development, appropriate risk management, and compliance with applicable laws and regulations. - Reviews (in collaboration with subject matter experts and functional leaders) and provides constructive feedback on assessments conducted against existing and new regulations. The primary objective is to strengthen the bank’s controls to address risks and meet regulatory requirements. - Maintains an inventory of relevant technology regulations applicable to the business.

Your profiles and requirements

- 5+ years of experience in technology risk management, preferably with experience in Singapore and Hong Kong (experience may include work at public accounting firms, international banks, regulatory agencies, etc.). - Professional certification in IT auditing/technology preferred (e.g., CISA, CISM, CISSP, etc.).

We offer

No information available.