Senior Manager, Technology Risk

About Dah Sing Group
The Dah Sing Group is a leading financial services group in Hong Kong offering banking, insurance, financial and other related services through its growing network of over 70 branches in Hong Kong, Macau and Mainland China.
Our currency is caring, teamwork and progressiveness. We accept that everyone is unique and different in talent, but alike in the capacity for growth. Our task is to shape a culture that creates a sense of pride in achieving something beyond just a job, and an environment where you can be your true and authentic self, like at home.

Job Roles:

• Support the IT Technology Risk in ensuring compliance with local regulatory requirements
• Performe IT security risk assessments and reporting risks to the responsible management and ensuring that the residual risks are being managed
• Coordinate information security responses across the organization for regulatory inspections, 2LOD risk review, and performing gap analysis against new or updated regulatory requirements
• Communicate IT security threats and providing risk advisories to key collaborators
• Supervise the latest IT innovations
• Facilitate the review and advise on the regulatory requirement during the IT projects
• Evaluate IT systems, the security policies of the bank, requirements of regulators and user departments to establish IT risk and security framework to manage the identified risk and factors
• Provide training and awareness update on technology risk
• Conduct IT risk review of IT systems, assess effectiveness of IT security measures
• Carry out ad-hoc tasks as required by management

Skills and experience:

• At least 7 years of Technology risk experience, preferable in the Banking industry
• Understanding of technology risk regulatory requirements in Hong Kong, Macau and China
• Good understanding of IT systems, Cloud technologies, and infrastructure along with the relevant security controls required to mitigate risk
• Relevant knowledge and proven experience in IT risk assessment, cybersecurity, access control principles and operation, application security
• Excellent written and verbal communication skills including ability to communicate clearly and concisely to various levels
• Ability to communicate and understand Chinese as the regulatory requirements are written in the local language
• Ability to adapt to a fast-moving IT landscape and keep pace with new technologies
• Analytical mind-set and meticulous in the deliverables
• Bachelor's degree in Computing, Information Systems Management or related discipline
• Holder of CISSP, CISM, CISA or equivalent
• Dedication to fostering an inclusive culture and value diverse perspectives

Please note that only shortlisted candidates will be notified.