China Local Incorporated Bank - Tech Ops Risk Management Lead

Job Responsibilities Regulatory Intelligence & Advisory Monitor technology regulatory and legislative developments across NFRA, PBOC, SAFE, CAC, CBA, CFETS, and SGE. Support China LIB Compliance on technology regulatory and compliance matters. Own and coordinate RFI responses within the Technology & Cyber domain. Risk Assessment & Independent Challenge Independently assess 1LOD technology risk management, controls, and governance through participation in new product rollouts, new business initiatives, and new product assessments. Perform targeted reviews of technology processes and controls against applicable laws, rules, and regulatory requirements. Technology Incident Oversight Provide 2LOD guidance on technology incidents, including advice on reportability to China regulators. Maintain working knowledge of incident thresholds, regulatory definitions, and escalation protocols within the Chinese regulatory environment. Innovation, Automation & Operational Scaling Use technology tools and AI-enabled automation to scale oversight and support continuous monitoring within the APAC CCOR Technology & Cyber function. Apply AI to support risk judgment and contribute to a more data-informed risk capability across the team. Required Qualifications, Capabilities, and Skills Education & Experience Bachelor's degree in Computer Science, Computer Engineering, Information Security, Business Information Systems, or a related field; or equivalent professional experience. Minimum 8 years of experience in Technology Risk, Cybersecurity, Compliance, IT Audit, and/or Operational Risk within financial services. Working knowledge of China-specific technology regulations, including NFRA, PBOC, and SAFE IT requirements. Technology & AI Fluency Ability to understand complex technical systems, the business processes they support, and the associated risks and controls. Familiarity with AI, large language models (LLMs), agentic AI, cloud computing, cybersecurity frameworks, and enterprise architectures. Familiarity with emerging regulatory requirements governing AI and algorithmic systems in financial services. Data, Analytics & Emerging Risk Apply quantitative and qualitative analysis to identify trends, anomalies, and risk signals across complex datasets. Experience moving from sample-based review toward thematic analysis and continuous monitoring. Use automation and AI-assisted tools to scale oversight across the risk function. Regulatory & Business Acumen Translate regulatory developments from NFRA, PBOC, SAFE, CAC, and CFETS into practical compliance implications. Clear verbal and written communication skills, with the ability to engage effectively across internal stakeholders and regulatory counterparts. Strong organizational, project management, and stakeholder management skills, with a track record of delivering results with professionalism and integrity. Behavioral Attributes Able to work across technology, business, legal, compliance, and operational domains, adapting communication style to each audience. Focused on outcomes, not procedural compliance alone. Committed to continuous learning as technology and the risk landscape evolve. Track record of building effective relationships in complex, matrixed organizations. Certifications (Beneficial) Relevant certifications include CISSP, CISA, CISM, CRISC, CCSP, or CGEIT. Cloud practitioner credentials (AWS, Azure, or equivalent) are also valued. Language Requirements Bilingual fluency in English and Chinese (spoken and written) is required.