Our client, a leading global financial institution, is looking for a strong IT Risk and Compliance Manager for their growing team. Selected candidate will be the key person to manage their IT Risk and Compliance function. Great exposure and opportunity.

Responsibilities:
– Provide IT Risk Management and Compliance Consultancy, including the following domain: (Information Security, IS Privacy and Compliance, Business Continuity and Disaster Recovery, and Regulatory and Law)
– Design, Plan and execute IT Risk Management Framework by collaborating with technology groups and other relevant groups (such as Compliance, Operational Risk, Audit, etc.)
– Work with technology teams to identify & enhance risk controls. Supporting the implementation and maintenance of T&D policies and standard. Enforcing compliance with Firm-standard technology risk posture
– Perform risk and control assessments on IT process, drive risk mitigation actions with proper records and documentations
– Work closely with the management and explain the potential risk, with proposed mitigating controls
– Establish compliance control framework with well-defined reporting and documentations

Required Skills/Experience:
– At least 7 years of relevant Technology Risk, IT Compliance and IT Audit experience. Working experience of risk assessment methodologies, internal controls and industry technology risk management frameworks such as CobiT and ISO2700x
– Strong understanding of financial industry businesses and Technology Risk regulations, candidate from external consultancy would be very much welcome
– Previous IT Risk Management and Information Security Experience
– Outstanding communication and interpersonal skills. Ability to work effectively with all levels of the organization; Ability to draft high quality written products that are comprehensive, accurate, and tailored to the audience
– Strong organizational skills and an ability to manage multiple demands and changing priorities. Detail oriented
– Strong analytical skills required to enable independent research and accurate assessments of risk management process effectiveness and adherence to regulatory requirements
– CISA or equivalent industry certification