SVP (Technology) -

Company Introduction:

We're home to Asia's most dynamic and vibrant capital markets.
Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day.

HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."

Job Summary:
The SVP position plays a critical leadership role in ensuring ongoing support for HKEX Board and executive governance oversight and reporting of major cyber and technology risks of HKEX Group. Additional major duties include coordination of firm-wide preparation for the Hong Kong cyber law, delivery of an external red-team test and the ongoing cyber awareness program, and technology risk advice on HKEX's cyber controls and strategic projects.

Job Duties:

Key Responsibilities :

• Lead and provide strategic oversight on the HKEX Group's technology risk governance and reporting on technology risk insights and observations. This includes formulating and managing deliverables for periodic Board and executive governance meetings, Group-level risk appetite, risk policies and guidance, metrics reporting, and risk control self-assessment.
  • Identify and monitor emerging technology risks and the latest technological developments (including artificial intelligence , cloud computing ). Escalate major risk insights and implications to senior management and relevant stakeholders in a timely manner, and provide advice on addressing the risks.
    • Foster and maintain effective relationships and collaboration with internal and external stakeholders, including regulators, law enforcement, industry peers , and partners.
      • Collaborate with key internal and external stakeholders to ensure compliance with emerging legal and regulatory requirements and industry best practices (including cyber and operational resilience) from a technology risk perspective.
        • Organize regular intelligence-led cyber-attack simulation exercises (red team) in line with regulatory guidance and industry best practices.
          • Deliver training and education initiatives to promote cyber awareness among staff members.
            • Provide insightful and pragmatic technology risk advice and constructive challenges on HKEX's technology risk controls and strategic projects.
              • Exercise Group-level oversight on technology risk matters of overseas Group entities.

• A consensus-building, persuasive, and reliable leader with highly effective communication skills for delivering technology risk messages to a broad range of technical and non-technical audiences, including board and executive committee levels and business users. Proficiency in Chinese and Putonghua would be an advantage.
  • University degree with at least 1 5 years of professional experience in technology risk management, preferably in the financial services sector , or professional services for banking or financial clients. Demonstrated experience in effective team management from strategic and technical perspectives.
    • A broad and in-depth understanding of industry best practices in managing technology risk. A t rack record in managing operational resilience from a technology risk perspective and /or managing cloud/ artificial intelligence projects and their associated risks would be an advantage.
      • Appropriate technical certificates ( e.g. CISA , CISSP) to complement experience required . Relevant professional qualifications in emerging technologies (such as artificial intelligence, cloud computing ) and cyber- attack simulation would be an advantage.
        • General knowledge of exchange /clearing house business and relevant regulatory practices would be highly regarded .
        HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.