Description

As a Second Line of Defense (2LoD) Senior Operational Risk Manager with technology focused and reporting to the lead of operational risk, you will provide independent oversight and validation of IT risk management activities, ensuring robust governance and risk mitigation across the organization. Leveraging your expertise in technology risk, vulnerability assessment, and cybersecurity controls, you will assess first-line risk management practices, advise on emerging threats, and ensure alignment with operational risk frameworks. This role requires strong collaboration with IT, cybersecurity teams, business units and other risk teams to safeguard the organization against evolving risks.

Main Responsibilities:

- Act as the independent validator of IT risk management activities performed by the first line within the second line of defense

- Review and assess the IT control documentation under various technology risk management frameworks

- Advise on technologies risk related to virtual asset activities

- Partner with the operational risk team to assess the adequacy and effectiveness of BCP set-up across reporting units

- Liaise with the operational risk team to follow up on technology risk issues identified through RCSA and KRI processes

- Liaise with the operational risk team to investigate IT incident, assess the remedial action plans and perform the follow-up procedures

- Review and advise on technology-related policies

- Provide independent risk insights to the stakeholders, translating vulnerabilities into business impact and advise on their control enhancements

- Assist in other technology risks related reporting, collaboration, and risk management initiatives

Education:

- Bachelor's/Master's degree in cybersecurity, IT, risk management, or a related field with a strong IT background

Qualifications:

- 7+ years in IT risk, cybersecurity, or operational risk, with at least 3 years in a 2LoD or advisory/audit/challenge role focusing on IT risk.

- Hands-on knowledge of vulnerability assessment, risk frameworks (NIST, ISO 27005), and cloud security risks

- Familiar with virtual asset risks, regulatory compliance and incident management

- Ability to work independently and collaboratively in a fast-paced environment.

- Ability to influence and build consensus across teams.

- Strong critical thinking to challenge first-line assumptions and controls.

We offer an attractive remuneration package and fringe benefits to the right candidate. Interested applicants please send detailed resume stating present and expected salaries, as well as date of availability, by clicking "Apply" or by sending it to

mailto:recruitment@gtjas.com.hk
.

(Data collected will be kept strictly confidential and used for recruitment purpose only.)

Guotai Junan International (Stock Code: 1788.HK) is the first Chinese securities company listed on Hong Kong Stock Exchange by way of IPO. Based in Hong Kong, we provide diversified financial services including wealth management, brokerage, corporate finance, loans and financing, asset management and financial products. Through the systematic management and training, you will have the opportunity to maximize your talents on our board platform and empower your future with GTJAI.