(Senior) Technology Risk Manager (2nd line of defense)
Core
Establish and review technology risk management policies, tools, and mechanisms for the Group; monitor first-line defenses and provide guidance on risk mitigation, control adequacy, and AI application risks.
Role type
Senior IC technology risk manager (2nd line of defense)
Builds
Technology risk management frameworks, regulatory reports, and AI-integrated risk initiatives
Domain
Banking / Financial Services / Technology Risk / AI Governance
Deliverable
dashboards & analysis
Required skills
Technology risk management, IT security, IT audit, regulatory compliance (HKMA), AI solution assessment, control testing, remediation monitoring
Preferred skills
CISA, CISSP, CISM, ISACA AAIA, AI implementation experience
Technologies
AI development frameworks, AI risk tools
Responsibilities
Assist in establishing and reviewing technology risk management policies and tools; monitor first-line defense application of risk tools; prepare management reports on technology risk status; assess control adequacy during due diligence of new products/services/AI; coordinate regulatory examinations and remediation monitoring; assist in implementing AI solutions for risk management
