• Advise business & technology users on understanding of relevant Technology Risk policies and standards and principles of security & controls as defined by the firm’s Technology Risk and Control Framework, and adoption of secure and resilient solutions available.
• Ensure understanding of local regulations impacting the technology environment & systems and work with regional and global teams to ensure proper understandings of potential gaps, in ways that are consistent with the global policies & security practices.
• Local representative for all internal Technology Risk matters, including Information Security, Business Continuity and Regulatory Interaction, responsible for working with local stakeholders, external counterparts and the regional and global teams to ensure understanding and addressing of potential gaps.
• Provide coordination and oversight so the firm can respond to regulatory requests & inquiries, in an effective, consistent and timely manner.
• Focus on infrastructure risk related programs and projects to improve the infrastructure security and respond to critical alerts or new vulnerabilities during the Asia time zone.
• Work on business initiatives to ensure infrastructure related risks are appropriately communicated and mitigated.
• Perform risk assessments to identify gaps in compliance to information security & BCP standards and policies, for both internal technology solutions as well as solutions provided by third-party service providers.
• Work with business users and technology counterparts in China and the region and the regional and global Technology Risk team to provide recommendations to mitigate critical and high priority issues identified as part of the risk assessment process.
• Maintain a thorough understanding of global, regional and local regulatory requirements that have a technology impact, in order to conduct internal self-assessments and gap analysis to ensure compliance.
• Participate in global, regional and local Technology Risk initiatives aimed at improving our ba<x>seline on information protection, resiliency and controls of technology processes and services.
• Participation in the development, review and communication of information security and BCP policies and standards as well as supporting the firm’s effort during regulatory and other external audits.
• Work with Business Continuity Coordinators in all business and Technology groups across the China and the Asia region to provide structure and guidance on their BCP plans and recovery strategies.
• Provide clear and concise verbal and written recommendations and guidance to both business and technology staff on matters of Technology Risk Management.
• Promote and assist in the training & awareness of information security and BCP in China and within the region.
• Contribute to ongoing support and other operational activities.
Job requires frequent interaction with numerous groups at several levels of management (both business & technology) and occasional interaction with external parties (firm’s service providers and business counterparties).
SKILL
• at least six or more years of technology experience, either in Technology Infrastructure or Application Development. Direct experience in Information Security, BCP, Technology Controls or Technology Risk Management fields a plus.
• Thorough understanding of infrastructure security, application security, or business continuity planning.
• Strong Infrastructure security knowledge in Windows Server, Desktop OS and applications, Unix/Linux OS, Storage, Networking hardware and protocols, Market Data, Databa<x>ses and Exchange Connectivity, Remote Access, Firewall and IDS/IPS technology, Voice and Audio Visual platforms, and experience in configuration and vulnerability management required.
• Strong project management skills and technology expertise required.
• Strong understanding of the regulatory environment, business continuity and/or technology control requirements across the Asia markets is a significant plus.
• Understanding of the business functions and the Technology role in a financial services firm is a big plus. Strong analytical & communication skills required.
• Ideal candidate must be bi-lingual and fluent in both English and Chinese with strong interpersonal skills.
