Tech Risk and Controls Lead

The Asia Pacific Technology Management Office (APAC TMO) ensures Global Technology is appropriately represented, governed and accountable at regional and location level across APAC. The function supports Technology Operating Committees, Senior Technology Officers (STOs) and senior business stakeholders, and plays a critical role in technology governance, regulatory engagement and legal entity oversight.

Tech Risk and Controls Lead,  Hong Kong Location Governance is a senior individual contributor role within APAC TMO, reporting to the APAC Regional and Location Technology Governance Lead. The role provides end‑to‑end ownership of technology governance activities for Hong Kong legal entities, with particular accountability for outsourcing oversight, technology inventories, executive reporting and regulatory engagement, and serves as a trusted adviser to the Hong Kong Senior Technology Officer and Technology Operating Committee.

This role requires a hands‑on, detail‑oriented leader who is equally comfortable leading at a strategic governance level and personally driving detailed delivery, including deep involvement in process analysis, workflow simplification, automation initiatives and data quality remediation. The successful candidate will not delegate complexity away, but will actively engage in designing, challenging and implementing practical solutions while maintaining senior‑level oversight and judgement.

In addition to Hong Kong location responsibilities, the role will actively support APAC Regional Production governance and oversight, a key priority for the APAC CIO across APAC Global Technology. The successful candidate will work closely with APAC GT Production Leadership to drive the region’s three core focus areas, providing hands‑on support across project governance, targeted deep dives and execution discipline. This includes helping run a weekly APAC production management forum, maintaining a detailed understanding of the regional change management calendar, and supplying leadership with clear, timely insights to support decision‑making, prioritization and risk management.

Job Responsibilities

• Provide Hong Kong location ownership for Technology governance frameworks, ensuring alignment with global standards and regional policies while meeting local regulatory expectations.
• Lead oversight of third‑party and inter‑affiliate (intra‑Bank) outsourcing arrangements for Hong Kong entities, including materiality assessments, risk reviews and regulatory notifications where required.
• Own the uplift and ongoing management of application and technology inventories for Hong Kong legal entities, ensuring accuracy and completeness of data that underpins Technology Executive Management Reporting (EMR) and regulatory submissions.
• Drive governance-related improvement initiatives from design through implementation, translating regulatory expectations into sustainable frameworks and operating practices.
• Support the Hong Kong Senior Technology Officer (STO) and Hong Kong Technology Operating Committee (HKTOC) in their oversight responsibilities across incidents, headline programmes, risk metrics, regulatory change and audit matters.
• Manage preparation and quality assurance of all materials for HKTOC and related forums, ensuring consistency with global and regional standards.
• Partner closely with the STO on technology updates, escalations and senior committee messaging.
• Actively support location technology audits, regulatory reviews and supervisory interactions, providing governance, outsourcing and inventory subject‑matter expertise.
• Ensure all regulatory submissions are robust, evidence‑based and balanced, reflecting input from relevant Technology, Business and Control stakeholders.
• Support the STO, as required, in the discharge of management accountability obligations, including preparation and submission of accountability statements.
• Apply a strong understanding of regulatory change, technology governance frameworks and legal entity operating models to anticipate impacts and guide compliant outcomes.
• Coordinate with Compliance, Audit, Technology Risk & Controls to ensure governance artefacts withstand regulatory and audit scrutiny.
• Ensure governance processes are well‑documented, repeatable and demonstrably effective.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate synthesis of risk/control evidence and draft executive-ready reporting, validating outputs and handling data according to sensitivity and security requirements
• Promotes reuse-first, AI-assisted approaches to streamline recurring control testing and issue/action-plan management routines, ensuring human review and alignment to auditability and regulatory expectations

Required Experience, Capabilities & Skills

• Degree or equivalent qualification; prior experience in Technology is required.
• 10 years’ experience in Technology, Technology Risk, Governance, or related disciplines; financial services experience strongly preferred, ideally in a regional or global role.
• Demonstrated knowledge of legal entity operating models, management accountability regimes, and Board / Branch governance structures.
• Prior experience engaging with financial regulators and/or self‑regulatory bodies.
• Proven ability to lead cross‑functional initiatives in complex, matrixed environments.
• Strong project execution capability with attention to detail and outcome focus.
• High standards of independence, integrity and professional judgement.
• Organised, articulate and proactive; comfortable operating at both strategic and granular levels.
• Non‑hierarchical in style; able to influence through expertise and credibility rather than authority.
• Strong relationship builder across Technology, Business and control functions.
• Demonstrates accountability, resilience and sound judgement in a fast‑paced, highly regulated environment.
• Proven record of being a hands‑on, detail‑oriented leader who is equally comfortable leading at a strategic governance level and personally driving detailed delivery.
• Experience working with large datasets, and management reporting.
• Familiarity with process re‑engineering and workflow automation concepts.
• Strong proficiency in MS Excel, PowerPoint, Visio and MS Project, with working knowledge of SharePoint‑based collaboration and document management.
• Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support technology risk and controls workflows with strong validation habits and awareness of data sensitivity.
• Ability to review and validate AI-assisted risk summaries and recommendations before use, escalating when uncertain and ensuring outcomes align to security, auditability, and regulatory expectations.