Job Responsibilities
Regulatory Intelligence & Advisory
- Monitor technology regulatory and legislative developments across NFRA, PBOC, SAFE, CAC, CBA, CFETS, and SGE.
- Support China LIB Compliance on technology regulatory and compliance matters.
- Own and coordinate RFI responses within the Technology & Cyber domain.
Risk Assessment & Independent Challenge
- Independently assess 1LOD technology risk management, controls, and governance through participation in new product rollouts, new business initiatives, and new product assessments.
- Perform targeted reviews of technology processes and controls against applicable laws, rules, and regulatory requirements.
Technology Incident Oversight
- Provide 2LOD guidance on technology incidents, including advice on reportability to China regulators.
- Maintain working knowledge of incident thresholds, regulatory definitions, and escalation protocols within the Chinese regulatory environment.
Innovation, Automation & Operational Scaling
- Use technology tools and AI-enabled automation to scale oversight and support continuous monitoring within the APAC CCOR Technology & Cyber function.
- Apply AI to support risk judgment and contribute to a more data-informed risk capability across the team.
Required Qualifications, Capabilities, and Skills
Education & Experience
- Bachelor's degree in Computer Science, Computer Engineering, Information Security, Business Information Systems, or a related field; or equivalent professional experience.
- Minimum 8 years of experience in Technology Risk, Cybersecurity, Compliance, IT Audit, and/or Operational Risk within financial services.
- Working knowledge of China-specific technology regulations, including NFRA, PBOC, and SAFE IT requirements.
Technology & AI Fluency
- Ability to understand complex technical systems, the business processes they support, and the associated risks and controls.
- Familiarity with AI, large language models (LLMs), agentic AI, cloud computing, cybersecurity frameworks, and enterprise architectures.
- Familiarity with emerging regulatory requirements governing AI and algorithmic systems in financial services.
Data, Analytics & Emerging Risk
- Apply quantitative and qualitative analysis to identify trends, anomalies, and risk signals across complex datasets.
- Experience moving from sample-based review toward thematic analysis and continuous monitoring.
- Use automation and AI-assisted tools to scale oversight across the risk function.
Regulatory & Business Acumen
- Translate regulatory developments from NFRA, PBOC, SAFE, CAC, and CFETS into practical compliance implications.
- Clear verbal and written communication skills, with the ability to engage effectively across internal stakeholders and regulatory counterparts.
- Strong organizational, project management, and stakeholder management skills, with a track record of delivering results with professionalism and integrity.
Behavioral Attributes
- Able to work across technology, business, legal, compliance, and operational domains, adapting communication style to each audience.
- Focused on outcomes, not procedural compliance alone.
- Committed to continuous learning as technology and the risk landscape evolve.
- Track record of building effective relationships in complex, matrixed organizations.
Certifications (Beneficial)
- Relevant certifications include CISSP, CISA, CISM, CRISC, CCSP, or CGEIT.
- Cloud practitioner credentials (AWS, Azure, or equivalent) are also valued.
Language Requirements
- Bilingual fluency in English and Chinese (spoken and written) is required.
