WeLab Bank - Manager, Technology Risk

WeLab, a leading pan-Asian fintech platform, operates two digital banks (WeLab Bank and Bank Saqu) as well as multiple online financial services in Hong Kong, Mainland China and Indonesia, with over 70 million individual users and over 700 enterprise customers. WeLab uses game-changing technology to help users access credit, save money, and enjoy their financial journey.

At WeLab, we always put our people first. Embarking on a career with WeLab means being part of the driving force to make financial services accessible for everyone. In our flat and agile organization, you will get all the opportunities to make real impacts and deliver change. Most importantly, while you achieve greatness, we will ensure you have an amazing experience at WeLab! 

Our team is energetic and passionate who can deliver and execute, and we are looking for intellectually curious, open-minded, and smart-working individuals who are just as passionate as we are about making financial services enjoyable. 

Join us to build a better financial future for everyone! 

About You:

You're a go-getter with mad juggling skills (or multiple hats) who can thrive in a fast-paced, agile environment 

You enjoy doing purpose-led and meaningful work 

You have a strong thirst for knowledge and are driven to find solutions that don't exist yet 

You are comfortable with ambiguity and extremely resourceful (in your past life, you could've been a detective) 

You always find a way to get things done without sacrificing the quality of your work, integrity, and values 

No task is off limits for you 

You are humble and prioritize the success of the team over your own with an eagerness to help those around you 

You don't shy away from challenges and can bounce back from setbacks 

What You’ll Do and What Success Looks Like

Oversee and manage cyber risk and technology risk controls within a fast-paced FinTech environment, ensuring that the Digital Bank manages the relevant technology risk and system stability, resilience, availability of banking systems in accordance with the Bank’s risk appetite

Maintain the bank-wide technology risk, cyber risk and Artificial Intelligence (AI) risk management framework

Review and evaluate the technology risk, cyber risk and AI-related risks for new project/product to ensure the bank’s compliance with regulatory requirements and the bank’s policy

Perform regular technology risk assessment for application (including AI application), cloud computing security and infrastructure environment

Assess and provide advice on third-parties’ risk management and outsourcing activities from technology risk and cyber risk perspective

Review the bank’s key control self-assessment testing results

Review current policies and procedures to perform gap analysis and recommend improvement areas

Review, coordinate and track the technology and cyber incident reporting, mitigation and remediation status

Collect, analyze, review and report technology risk limits and technology risk indicators to assist senior management in overseeing technology risk

Familiar with HKMA, SFC, IA, PCPD and other regulatory bodies’ requirements

Work with internal and external auditors and regulatory bodies

Keep abreast with latest threats, vulnerabilities, mitigation and industry best practice related to technology risk, cyber risk and AI-related risks

Conduct technology risk and information security awareness trainings to staff

What is Required and What We’re Looking For

Degree holder in Information Technology, Risk Management or related disciplines

5+ years of experience in information security, cybersecurity, IT System/ network management, application development, technology risk management, risk management related to AI applications or IT audit

Professional level qualification under HKMA ECF on cybersecurity, e.g., CISA, CISM, CISSP, CRISC or related certifications is a must

Holders of CCSP, OSCP, CREST, AAIA, AAISM will also be an advantage

Knowledge and background in Cloud technology and AI technology will be preferred

Experience in handling enquiries from regulatory bodies and external auditor is essential

Experience in managing, building, or adapting a risk management framework and understanding of HKMA, SFC and PCPD requirements

Demonstrates IT domain knowledge such as infrastructure, system development, agile SDLC, information security, cybersecurity and AI development

Strong problem-solving and analytical skills

Excellent interpersonal and communication skills in both written and spoken English and Chinese

Perks and Benefits to enrich your experience at WeLab:

Learning and development stipend - we value lifelong learning and believe the best way to invest in our employees is to encourage them to continue to learn 

Wellness and happiness – Numerous activities to let you focus on your physical and mental wellbeing. We allow flexible time offs to take care of personal matters and to enjoy time with family and friends 

Comfortable and positive work environment – Open plan office for easy collaboration and social with your colleagues, or branch out into your own thinking pods when needed, with FREE food and drinks for when you want to recharge 

Work smart, play hard – Connect with your colleagues over food and drinks at the stocked pantry, in the spacious social area with board games and a ping pong table, or over activities like hiking, yoga, badminton, etc. 

A big and contagious smile on everyone’s face to make you happier :) 

WeLab’s Awards & Recognitions:

Asia Banking Finance Retail Banking Awards: Virtual Bank of the Year - Hong Kong  

CNBC Disruptor 50: the only Hong Kong-based company on the list 

Financial Times Asia-Pacific High-Growth Companies: #2 in ranking  

The Chinese University of Hong Kong “Corporate Innovation Index”: #1 in ranking 

We offer a competitive salary package to the successful candidate. If you are interested in joining this exciting team, please apply with resume via the "Apply" button below.

All information provided by applicants will be used for recruitment purposes only. Information of unsuccessful applicants will be destroyed within 24 months of receipt.