Technology Risk Management Officer

Job description

The CRO department develops and oversees the global framework for risk identification, control, reporting, and management within the risk tolerance limits for the various business activities, with the goal of achieving sustainable growth for the company. This includes compliance with technology risk frameworks and related requirements.

Tasks

• Works closely with internal and external stakeholders, including colleagues in technology risk management, business transformation, IT, compliance, and information security (both in the APAC region and globally).
• Provides technology risk management for the second line of defense in banking projects and offers advice on requirements and potential solutions to meet regulatory expectations.
• Serves as the point of contact for interpreting and advising on the technological aspects of regulations (primarily SG/HK), including key regulatory authorities such as MAS, HKMA, ABS, HKAB, SFC, etc.

Regulatory responsibilities and risk management

• Demonstrates appropriate values and behaviors, including standards of honesty and integrity, diligence and conscientiousness, fair dealing (treating customers fairly), conflict management, competence and continuous development, appropriate risk management, and compliance with applicable laws and regulations.
• Reviews (in collaboration with experts and department heads) and provides constructive feedback on assessments conducted in accordance with existing and new regulations, with the aim of strengthening the bank’s controls and ensuring compliance with risks and regulatory requirements.
• Maintains an inventory of relevant technology regulations that apply to the business.

Your profile

• Excellent communication skills; fluent in English; knowledge of Mandarin is a plus.
• 3–5 years of experience in technology risk management, preferably with experience in Singapore and Hong Kong (experience may also have been gained at public accounting firms, international banks, regulatory agencies, etc.).
• Professional certification in IT controls/technology is preferred (e.g., CISA, CISM, CISSP, etc.).