Head of Technology Risk

5 days ago

Hong Kong, Hong Kong SAR China AIA International Limited. Full time
At AIA we've started an exciting movement to create a healthier, more sustainable future for everyone.

It's about finding new ways to not only better people's lives, but to better the communities and environments we live in. And we build on this every day with our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030.

And to get there, we need leaders with the courage, clarity and humanity to inspire, guide and support their teams to thrive every day - in the work they do and the life they live. Our leaders always have and will play a vital part in our journey to help more people live Healthier, Longer, Better Lives, build healthier societies and cultivate healthier environments that better everyone.

If you sound like that leader, read on.

About the Role

The Head of Technology Risk will lead and oversee the professional Technology Risk colleagues and specialists and act as a second line defence in partnership with the business owner to manage the concerning risks involving or affecting technology, and ensures that technology risks are appropriately identified, measured, assessed, and mitigated in the right priority.
He/ She is expected to take lead on the development and implementation of technology risk management governance programmes for AIA Hong Kong and Macau business which includes AIAI HK, AIAI Macau, AIA Everest, Blue Cross, U-Care and Blue Care. In addition, the role covers the optimal security implementation and implementation of operation model which are in alignment with the Group Technology Risk's strategic directions.

Roles and Responsibilities:

Implementation of Technology Risk Governance Program (50%)
  • Responsible to develop and manage technology risk governance framework & risk portfolio, in accordance with AIA Group policies and guidelines.
  • Proactively identify and effectively communicate emerging technology risks and opportunities to stakeholder at all levels of the organisation.
  • Conduct gap analysis on various regulatory requirement and drive program to bridge the gap.
  • Develop and implement the plans to uplift the technology risk standard and resiliency across the organisation.
  • Collaborate with risk owners to drive the identification and assessment, management and response, monitoring, and controls of data and technology risks on key initiatives and projects.
  • Champion and advocate the ownership of technology risk management, ensure risks are understood and managed within approved risk thresholds.
  • Partner with Group Office to evaluate new tech risk solutions and assess the implementation risk of the group-wide projects.
  • Increase awareness and enhance risk culture across the organisation and provide day to day risk and control advice as trusted 2nd line subject matter expert.
Reporting and Monitoring (as second line) (40%)
  • Define and monitor relevant KRIs related to IT risks and provide regular update to Operational Risk Committee, and update Group Technology Risk when necessary.
  • Monitor security incident response, handling, and investigation process.
  • Manage the communications with Group Office, business partners, corporate clients and other external parties on IT security matters.
  • Interface and liaise with business key stakeholders (e.g. HR, PD, Customer Experience and Transformation, Health & Wellness Strategy Management etc) to roll out new Technology Risk initiatives and uplift the security of the business applications.
  • Serve as subject expert in examining Risk Papers of key projects.
  • Regular reporting to senior management and relevant committees on technology risk and security matters, including developments in the organization's technology risk profile in line with developments within and outside the organization, to ensure that the information security, cyber risks and threats are within the company's risk tolerances.
  • Lead the technology risk and control assessment and effective risk management practices and recommend actions to be taken for execution.
Staff Development (10%)
  • Responsible for structuring, coaching, and developing team members to strengthen the capabilities of Technology Risk function.
Minimum Job Requirements:
  • Degree holder in Computer Science, Information Systems/ Security, or related discipline.
  • At least 15 years of relevant and solid experience in technology risk management and control, gained from sizable multi-national banks and insurance companies.
  • Solid understanding of IT security products and solutions. Knowledge of SailPoint IIQ and CyberArk are definite advantages.
  • Subject matter expert in mobile and web application security -- Authentication, Access Control, Data Encryption and Data Loss Prevention.
  • Equipped with IT security certifications -- Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Systems Manager (CISM), Certified Information Forensic Investigator (CIFI).
  • Knowledge of PCI-DSS and implementing information security frameworks or standards, such as NIST, ISO 27001, COBIT.
  • Analytical and objective; able to elaborate on, characterize, assess, and evaluate risks.
  • Confident and trustworthy; keen to earn the respect and trust of, and inspire, others. Independent and have a strong sense of taking one own's initiative to solve problems.
Others:
  • You are required to obtain relevant license if your job involves in regulated activities
Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.

  • Head of Security Governance

    5 days ago

    Hong Kong, Hong Kong SAR China KOS International Full time

    About the Client Our client is a reputable company that has strong business in Hong Kong and China. With an increasing growth and a vision to diversify their portfolio, they are now seeking for a Head of Security Governance & Technology Risk to lead to join their team. About the Role This is a newly established senior leadership position, tasked with...

  • KOS International Limited | Head of Security Governance

    5 days ago

    hong kong, Hong Kong SAR China KOS International Limited Full time

    Head of Security Governance & Technology Risk (60464) Hong Kong About the Client Our client is a reputable company that has strong business in Hong Kong and China. With an increasing growth and a vision to diversify their portfolio, they are now seeking a Head of Security Governance & Technology Risk to join their team. About the Role This is a newly...

  • AIA Hong Kong and Macau | Head of Technology Risk

    6 days ago

    hong kong, Hong Kong SAR China AIA Hong Kong and Macau Full time

    At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone. It’s about finding new ways to not only better people's lives, but to better the communities and environments we live in. And we build on this every day with our ambition to engage one billion people to live Healthier, Longer, Better Lives by 2030. And...

  • Head of IT Risk Control

    5 days ago

    Hong Kong, Hong Kong SAR China Dah Sing Financial Group Full time

    About Dah Sing Group The Dah Sing Group is a leading financial services group in Hong Kong offering banking, insurance, financial and other related services through its growing network of over 70 branches in Hong Kong, Macau and Mainland China. Our currency is caring, teamwork and progressiveness. We accept that everyone is unique and different in talent,...

  • Head of Technology Risk

    5 days ago

    Hong Kong, Hong Kong SAR China Meliora Full time

    Candidates should have deep understanding of the following:   Over 12+ years experience working in 2nd line technology risk functions  Able to to built out technology risk frameworks, policies and processes from scratch Have experience managing a team of approx. 5 employees  Deep knowledge of NIST / ISO27001  Certification in CISSP / CISM / CISA is...

  • Senior Technology Risk and Compliance Specialist

    3 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Job Description:Company OverviewThe Bank of China (Hong Kong) Limited is a leading financial institution in Hong Kong, committed to providing innovative banking solutions to our customers.Job ResponsibilitiesWe are seeking a Senior Technology Risk and Compliance Specialist to join our team. The successful candidate will be responsible for conducting regular...

  • Team Head of Credit Card Risk

    5 days ago

    Hong Kong, Hong Kong SAR China ALL-STAR AGENCY Full time

    Overview: We're partnering with one of the leading Chinese banks to hire a Team Head of Credit Card Risk. This role focuses on credit card risk and will lead a team of 10 people. Key Duties and Responsibilities: As the Team Head of Credit Card Risk, you'll oversee and lead the Risk Management team focused on credit card and unsecured lending products....

  • Senior Technology Risk Manager

    5 days ago

    Hong Kong, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Responsibilities: Identify the existing and potential risk in IT operation, report the risk to supervisor and related parties in time, formulate the rectification plan and follow up. Implement effective detection and control measures to strengthen the production operation safety and effectiveness of IT Department Responsible for the communication and...

  • Technology Risk Manager

    5 days ago

    Hong Kong, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Roles and Responsibilities & Specific Requirements (Application Security): Assist in reviewing IT initiatives and provide advisory from technology risk perspectives Assist to establish and review policies, guidelines, procedures in application security area Provide advisory and practical guidance to support technology risk and information security...

  • Head of Risk Steward Oversight

    5 days ago

    Hong Kong, Hong Kong SAR China Hang Seng Bank Limited Full time

    Job description A Career with Hang Seng Bank Hang Seng is committed to service excellence. Our people are our most important asset and play a vital role in our efforts to continually enhance our performance for customers and provide best-in-class products and services. We seek to attract high-calibre talent by offering a dynamic working environment, good...

  • Senior Vice President

    5 days ago

    Hong Kong, Hong Kong SAR China Hong Kong Exchanges and Clearing Limited Full time

    Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development...

  • Technology Risk Manager

    5 days ago

    Hong Kong, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Roles and Responsibilities & Specific Requirements (Cyber Security): Provide Cyber Security incident response operation and support. Experience in arrangement and co-ordination of cross-countries cyber incident response drills. Experience in Security operations, managing SOC, Offensive security, Container security, Threat Hunting, OSINT, Darkweb...

  • Technology Risk Manager

    5 days ago

    Hong Kong, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Responsibilities: Identify the existing and potential risk in IT operation, report the risk to supervisor and related parties in time, formulate the rectification plan and follow up. Implement effective detection and control measures to strengthen the production operation safety and effectiveness of IT Department Responsible for the communication and...

  • Technology Risk

    5 days ago

    Hong Kong, Hong Kong SAR China Hays Full time

    Technology Risk, Tech RiskYour new role - Conduct comprehensive IT risk assessments and audits, identifying vulnerabilities and recommending actionable solutions.- Lead and participate in cybersecurity compliance reviews, ensuring adherence to regulatory requirements and industry best practices.- Perform vulnerability scanning, penetration testing, and risk...

  • Risk Management Strategist

    13 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China AIA International Limited. Full time

    Unlocking a Healthier, More Sustainable FutureAIA International Limited is at the forefront of creating a healthier, more sustainable future for everyone. We're committed to engaging one billion people to live Healthier, Longer, Better Lives by 2030.As a leader in this movement, you'll inspire and guide your teams to thrive every day – in their work and...

  • VP, Market Risk

    5 days ago

    Hong Kong, Hong Kong SAR China Charterhouse Partnership Hong Kong Full time

    Our client, a leading financial institution - is looking for a VP, Market Risk for their firm. Key Responsibilities Oversee risk management tasks, including but not limited to Value at Risk (VaR), Profit & Loss (P&L) analysis, and position calculations. Manage market and liquidity risk for all treasury-related activities, ensuring effective monitoring of...

  • Senior Risk Manager

    24 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    We are seeking a seasoned Senior Technology Risk Manager to join our team at Bank Of China (Hong Kong) Limited. This key role will be responsible for overseeing the planning, management, and daily operation of technology risk management across our organization.Key Responsibilities:Lead Technology Risk Management: Develop and implement effective strategies to...

  • FRESH & CLEAN TECHNOLOGY LIMITED | Technical Project Manager (TPM)

    3 days ago

    hong kong, Hong Kong SAR China FRESH & CLEAN TECHNOLOGY LIMITED Full time

    On-site Full Time 3 year or above Associate Skills: Problem analysis, Problem-solving, Project Planning and Scheduling Job Description We are seeking a passionate and experienced Technical Project Manager to lead and manage our innovative consumer electronics projects. In this role, you will oversee the entire technical lifecycle of projects—from concept...

  • Market Risk Management Expert

    4 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Charterhouse Partnership Hong Kong Full time

    Charterhouse Partnership Hong Kong is seeking a seasoned Market Risk Management expert to join their team.Key ResponsibilitiesRisk Oversight and AnalysisLead the development and implementation of risk management strategies, encompassing Value at Risk (VaR) and Profit & Loss (P&L) analysis.Manage market and liquidity risk for all treasury-related activities,...

  • FRESH & CLEAN TECHNOLOGY LIMITED | Research Scientist (Chemistry)

    5 days ago

    hong kong, Hong Kong SAR China FRESH & CLEAN TECHNOLOGY LIMITED Full time

    On-site Full Time 1 year or above Associate Fresh & Clean Technology Limited (aka: Zuvi) is looking for a Research Scientist in the field of Chemistry to conduct fundamental research on related fields of the company's upcoming consumer electronics products. Responsibilities: Conduct preliminary research and proof-of-concept validation for new projects,...