We are currently seeking an experienced professional to join our team in the role of Lead Business Analyst.

Key Responsibilities:

• Develop, maintain, and implement IT risk management policies, standards, and control frameworks (e.g., ISO27001, NIST, COBIT).
• Conduct regular risk assessments and Control Self-Assessments (CSA) for technology initiatives, infrastructure, and information assets.
• Establish, monitor, and update Key Risk Indicators (KRIs) and Key Controls to ensure operating effectiveness.
• Ensure IT practices comply with local regulations (e.g., HKMA, GDPR, PCI-DSS) and act as a focal point for internal and external audit examinations.
• Lead IT incident investigation, perform root cause analysis (RCA), and ensure prompt rectification of control weaknesses.
• Oversee information security risk management for vendor onboarding and off-boarding.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field.
• 5+ years of relevant experience in technology risk management, IT audit, or IT security within the banking/financial services industry.
• Professional certifications such as CISA, CISSP, CISM, CRISC, or similar are strongly preferred.
• Understanding of IT general controls (ITGC), cybersecurity best practices, data protection, and cloud security principles.
• Familiarity with local financial authority regulations and technical risk management guidelines.

Core Skills:

• Analytical Thinking: Ability to identify and quantify complex technology risks.
• Communication: Excellent interpersonal skills to influence and collaborate with first-line business units and stakeholders.
• Problem-Solving: Proven ability to define and drive the implementation of remediation plans.
• Leadership: Ability to lead IT risk awareness initiatives and work under pressure.

You'll achieve more when you join HSBC. HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment.

XML job scraping automation by YubHub