Tech Cyber ORM

Job Responsibilities

Regulatory Intelligence & Advisory

• Monitor technology regulatory and legislative developments across China financial regulators and government agencies, including CSRC, NFRA, PBOC, SAFE, CAC, CBA, and Exchange centers.

• Support the China franchise Compliance team on technology regulatory and compliance matters.

• Support lines of business through new initiative and new product assessments.

• Build and maintain working relationships with lines of business, legal, data offices, and broader CCOR teams to enable cross-functional and cross-entity collaboration.

Risk Assessment & Independent Challenge

• Independently assess 1LOD technology risk management, controls, and governance through reviews and other activities against applicable laws, rules, and regulatory requirements for supported China entities.

Technology Incident Oversight

• Provide 2LOD guidance on technology incidents, including advice on reportability to China regulators (CSRC, NFRA, PBOC, SAFE).

• Maintain working knowledge of incident thresholds, regulatory definitions, and escalation protocols within the Chinese regulatory environment.

Innovation, Automation & Operational Scaling

• Use technology tools and AI-enabled automation to scale oversight and support continuous monitoring within the APAC CCOR Technology & Cyber function.

• Apply AI to support risk judgment and contribute to a more data-informed risk capability across the team.

Required Qualifications, Capabilities, and Skills

Education & Experience

• Bachelor's degree in Computer Science, Computer Engineering, Information Security, Business Information Systems, or a related field; or equivalent professional experience.

• Minimum 10 years of experience in Technology Risk, Cybersecurity, Compliance, IT Audit, and/or Operational Risk within financial services.

• Working knowledge of China-specific technology regulations, including CSRC, NFRA, PBOC, and SAFE IT requirements.

Technology & AI Fluency

• Ability to understand complex technical systems, the business processes they support, and the associated risks and controls.

• Familiarity with AI, large language models (LLMs), agentic AI, cloud computing, cybersecurity frameworks, and enterprise architectures.

• Familiarity with emerging regulatory requirements governing AI and algorithmic systems in financial services.

Data, Analytics & Emerging Risk

• Apply quantitative and qualitative analysis to identify trends, anomalies, and risk signals across complex datasets.

• Experience moving from sample-based review toward thematic analysis and continuous monitoring.

• Use automation and AI-assisted tools to scale oversight across the risk function.

Regulatory & Business Acumen

• Translate regulatory developments from CSRC, NFRA, PBOC, and SAFE into practical compliance implications.

• Strong organizational, project management, and stakeholder management skills, with a track record of delivering results with professionalism and integrity.

Behavioral Attributes

• Able to work across technology, business, legal, compliance, and ORM functions, adapting communication style to each audience.

• Focused on outcomes, not procedural compliance alone.

• Committed to continuous learning as technology and the risk landscape evolve.

• Track record of building effective relationships in complex, matrixed organizations.

Certifications (Beneficial)

• Relevant certifications include CISSP, CISA, CISM, CRISC, CCSP, or CGEIT.

• Cloud practitioner credentials (AWS, Azure, or equivalent) are also valued.

Language Requirements

• Bilingual fluency in English and Chinese (spoken and written) is required.