Technology Risk Management Lead

Job Responsibilities

Regulatory Intelligence & Advisory

• Monitor technology regulatory and legislative developments across NFRA, PBOC, SAFE, CAC, CBA, CFETS, and SGE.
• Support China LIB Compliance on technology regulatory and compliance matters.
• Own and coordinate RFI responses within the Technology & Cyber domain.

Risk Assessment & Independent Challenge

• Independently assess 1LOD technology risk management, controls, and governance through participation in new product rollouts, new business initiatives, and new product assessments.
• Perform targeted reviews of technology processes and controls against applicable laws, rules, and regulatory requirements.

Technology Incident Oversight

• Provide 2LOD guidance on technology incidents, including advice on reportability to China regulators.
• Maintain working knowledge of incident thresholds, regulatory definitions, and escalation protocols within the Chinese regulatory environment.

Innovation, Automation & Operational Scaling

• Use technology tools and AI-enabled automation to scale oversight and support continuous monitoring within the APAC CCOR Technology & Cyber function.
• Apply AI to support risk judgment and contribute to a more data-informed risk capability across the team.

Required Qualifications, Capabilities, and Skills

Education & Experience

• Bachelor's degree in Computer Science, Computer Engineering, Information Security, Business Information Systems, or a related field; or equivalent professional experience.
• Minimum 8 years of experience in Technology Risk, Cybersecurity, Compliance, IT Audit, and/or Operational Risk within financial services.
• Working knowledge of China-specific technology regulations, including NFRA, PBOC, and SAFE IT requirements.

Technology & AI Fluency

• Ability to understand complex technical systems, the business processes they support, and the associated risks and controls.
• Familiarity with AI, large language models (LLMs), agentic AI, cloud computing, cybersecurity frameworks, and enterprise architectures.
• Familiarity with emerging regulatory requirements governing AI and algorithmic systems in financial services.

Data, Analytics & Emerging Risk

• Apply quantitative and qualitative analysis to identify trends, anomalies, and risk signals across complex datasets.
• Experience moving from sample-based review toward thematic analysis and continuous monitoring.
• Use automation and AI-assisted tools to scale oversight across the risk function.

Regulatory & Business Acumen

• Translate regulatory developments from NFRA, PBOC, SAFE, CAC, and CFETS into practical compliance implications.
• Clear verbal and written communication skills, with the ability to engage effectively across internal stakeholders and regulatory counterparts.
• Strong organizational, project management, and stakeholder management skills, with a track record of delivering results with professionalism and integrity.

Behavioral Attributes

• Able to work across technology, business, legal, compliance, and operational domains, adapting communication style to each audience.
• Focused on outcomes, not procedural compliance alone.
• Committed to continuous learning as technology and the risk landscape evolve.
• Track record of building effective relationships in complex, matrixed organizations.

Certifications (Beneficial)

• Relevant certifications include CISSP, CISA, CISM, CRISC, CCSP, or CGEIT.
• Cloud practitioner credentials (AWS, Azure, or equivalent) are also valued.

Language Requirements

• Bilingual fluency in English and Chinese (spoken and written) is required.