WeLab Bank - Manager, Technology Risk

WeLab, a leading pan-Asian fintech platform, operates two digital banks (WeLab Bank and Bank Saqu) as well as multiple online financial services in Hong Kong, Mainland China and Indonesia, with over 70 million individual users and over 700 enterprise customers. WeLab uses game-changing technology to help users access credit, save money, and enjoy their financial journey.

At WeLab, we always put our people first. Embarking on a career with WeLab means being part of the driving force to make financial services accessible for everyone. In our flat and agile organization, you will get all the opportunities to make real impacts and deliver change. Most importantly, while you achieve greatness, we will ensure you have an amazing experience at WeLab! 

Our team is energetic and passionate who can deliver and execute, and we are looking for intellectually curious, open-minded, and smart-working individuals who are just as passionate as we are about making financial services enjoyable. 

Join us to build a better financial future for everyone! 

About You:

• You're a go-getter with mad juggling skills (or multiple hats) who can thrive in a fast-paced, agile environment 
• You enjoy doing purpose-led and meaningful work 
• You have a strong thirst for knowledge and are driven to find solutions that don't exist yet 
• You are comfortable with ambiguity and extremely resourceful (in your past life, you could've been a detective) 
• You always find a way to get things done without sacrificing the quality of your work, integrity, and values 
• No task is off limits for you 
• You are humble and prioritize the success of the team over your own with an eagerness to help those around you 
• You don't shy away from challenges and can bounce back from setbacks 

What You’ll Do and What Success Looks Like

• Oversee and manage cyber risk and technology risk controls within a fast-paced FinTech environment, ensuring that the Digital Bank manages the relevant technology risk and system stability, resilience, availability of banking systems in accordance with the Bank’s risk appetite
• Maintain the bank-wide technology risk, cyber risk and Artificial Intelligence (AI) risk management framework
• Review and evaluate the technology risk, cyber risk and AI-related risks for new project/product to ensure the bank’s compliance with regulatory requirements and the bank’s policy
• Perform regular technology risk assessment for application (including AI application), cloud computing security and infrastructure environment
• Assess and provide advice on third-parties’ risk management and outsourcing activities from technology risk and cyber risk perspective
• Review the bank’s key control self-assessment testing results
• Review current policies and procedures to perform gap analysis and recommend improvement areas
• Review, coordinate and track the technology and cyber incident reporting, mitigation and remediation status
• Collect, analyze, review and report technology risk limits and technology risk indicators to assist senior management in overseeing technology risk
• Familiar with HKMA, SFC, IA, PCPD and other regulatory bodies’ requirements
• Work with internal and external auditors and regulatory bodies
• Keep abreast with latest threats, vulnerabilities, mitigation and industry best practice related to technology risk, cyber risk and AI-related risks
• Conduct technology risk and information security awareness trainings to staff
  

What is Required and What We’re Looking For

• Degree holder in Information Technology, Risk Management or related disciplines
• 5+ years of experience in information security, cybersecurity, IT System/ network management, application development, technology risk management, risk management related to AI applications or IT audit
• Professional level qualification under HKMA ECF on cybersecurity, e.g., CISA, CISM, CISSP, CRISC or related certifications is a must
• Holders of CCSP, OSCP, CREST, AAIA, AAISM will also be an advantage
• Knowledge and background in Cloud technology and AI technology will be preferred
• Experience in handling enquiries from regulatory bodies and external auditor is essential
• Experience in managing, building, or adapting a risk management framework and understanding of HKMA, SFC and PCPD requirements
• Demonstrates IT domain knowledge such as infrastructure, system development, agile SDLC, information security, cybersecurity and AI development
• Strong problem-solving and analytical skills
• Excellent interpersonal and communication skills in both written and spoken English and Chinese

Perks and Benefits to enrich your experience at WeLab:

• Learning and development stipend - we value lifelong learning and believe the best way to invest in our employees is to encourage them to continue to learn 
• Wellness and happiness – Numerous activities to let you focus on your physical and mental wellbeing. We allow flexible time offs to take care of personal matters and to enjoy time with family and friends 
• Comfortable and positive work environment – Open plan office for easy collaboration and social with your colleagues, or branch out into your own thinking pods when needed, with FREE food and drinks for when you want to recharge 
• Work smart, play hard – Connect with your colleagues over food and drinks at the stocked pantry, in the spacious social area with board games and a ping pong table, or over activities like hiking, yoga, badminton, etc. 
• A big and contagious smile on everyone’s face to make you happier :) 

WeLab’s Awards & Recognitions:

• Asia Banking Finance Retail Banking Awards: Virtual Bank of the Year - Hong Kong  
• CNBC Disruptor 50: the only Hong Kong-based company on the list 
• Financial Times Asia-Pacific High-Growth Companies: #2 in ranking  
• The Chinese University of Hong Kong “Corporate Innovation Index”: #1 in ranking 
  

We offer a competitive salary package to the successful candidate. If you are interested in joining this exciting team, please apply with resume via the "Apply" button below.

All information provided by applicants will be used for recruitment purposes only. Information of unsuccessful applicants will be destroyed within 24 months of receipt.