Our client, a leading bank, is looking for an experienced Tech Risk and Audit Associate to join their Security and Risk team. The successful candidate will be interacting with senior stakeholders, risk team, technology team and business on related risk management.

Responsibilities:
– Provide a broad view of Information Security and Risk including risk assessments, application security programme, manage key risk and remediation station using control systems etc.
– Coordinate internal audits, external audits, and regulators. Ensure the Information Risk Management is well adopted in the key technology process and SDLC.
– Perform Investigation on technology related frauds and incidents.
– Review cyber security risk and potential threads.
– Work closely with the senior management through tracking and reporting function, to ensure a timely response to executives, board, and regulators.
– Develop and govern Security and Risk programme, assist on define application security strategy, assessment methodology and framework.

Required skills/experience:
– At least 6 years experience in IT Risk and Audit area, ideally with exposure to banking / financial services industry.
– Experience with IT Risk Control or IT Audit.
– Understanding of regulatory experiences including HKMA is highly preferable.
– Understanding of Technology Risk Management across Database, Operating Systems, and Information Security practices.
– Outstanding communication and interpersonal skills. Ability to work effectively with all levels of the organization.
– Strong analytical skills required to enable independent research and accurate assessments of risk management process effectiveness and adherence to regulatory requirements.
– CISA, CISM, CISSP or equivalent industry certification is preferred.