Technology Risk Manager (Information Security Control Division)

Job title: Technology Risk Manager (Information Security Control Division)

Company: Bank of China


Job description: Join Bank of China (Hong Kong)Be a dynamic member of our teamWe commit to excellence and professionalismWe value peopleWe offer challenging and rewarding careers that will further your personal development.For other vacancies, please visit our website at http://www.bochk.comJob No.: 499438
Employment Type: Full time
Departments: Information Technology Department
Job Functions: Information TechnologyRoles and Responsibilities & Specific Requirements (Application Security):

• Assist in reviewing IT initiatives and provide advisory from technology risk perspectives
• Assist to establish and review policies, guidelines, procedures in application security area
• Provide advisory and practical guidance to support technology risk and information security assessments, include vulnerability scanning, penetration test etc.
• Conduct regular assessment on application security
• Familiar with security testing tools e.g. Fortify, AppScan and Open Source Scanning tools, technologies on DevSecOps and industry good practice OWASP is preferable

General Job Requirements:

• Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.
• Over 4 years of experience in IT security, technology risk, risk management, compliance or IT audit function, gained from other sizable financial institutions
• Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CRISC is preferable.
• Familiar with HKMA TM-E-1, PCI-DSS, ISO 2700-series or other security risk management framework is an advantage
• Good command of written and spoken English with Mandarin is preferable and
• Good communication and interpersonal skills;

We offer competitive remuneration package and comprehensive fringe benefits including medical and life insurance, and different types of allowances to the right candidate. Interested parties, please submit your application online. For details, please visit our website http://www.bochk.comTo apply: https://careers.pageuppeople.com/798/cw/en/job/499438/technology-risk-manager-information-security-control-division=11232Data collected would be used for recruitment purposes only. It might also be disclosed to our subsidiaries or Associated Companies to process the information for appointment. Applicants who do not hear from us within 8 weeks may consider their application unsuccessful and their data will be destroyed within 12 months of receipt.

Expected salary:

Location: Hong Kong

Job date: Sun, 02 Mar 2025 08:29:26 GMT

To help us track our recruitment effort, please indicate in your email/cover letter where (jobsnear.pro) you saw this job posting.Thanks&Good Luck