Job Description

Analyst, IT & Cyber Risk Control, Risk Management, Asia Pacific

Country: Hong Kong

As an IT & Cyber risk Analyst, you will provide an independent oversight over Technology and Cyber-Security risks and controls across SCIB APAC branches.

Key Responsibilities

• Monitor emerging IT and cybersecurity risks, assess their potential impact on the organization, and oversee the effectiveness of related controls and the progress of remediation action plans.
• Support the assessment, monitoring, and reporting of the IT, cybersecurity, and business continuity risk profile across SCIB APAC branches.
• Support and coordinate independent assessments of technology and cybersecurity risks and controls, including maturity assessments, regulatory assessments (e.g., CRAF), and other relevant reviews.
• Review Group policies and procedures and work in the transposition ensuring alignment with local regulatory requirements.
• Review and monitor internal and external IT and cybersecurity incidents, Key Risk Indicators (KRIs), audit findings and recommendations, and associated remediation actions.

Basic Requirements

• At least 2 years of proven experience in IT security and controls functions in the Banking Industry and/or Big 4.
• Bachelor’s degree in computer science, Engineering, Physics, Math or related field; post graduate degree a plus.
• IT security certifications CISA is required; CISM, CRISC will be highly valued.
• High English and Mandarin Level. Spanish will be a plus.
• Ability to understand technical IT & Cyber process and documents (Network maps, Firewall rules, etc.)