OpenNash Jobs
Santander · Hong Kong

Analyst, IT & Cyber Risk Control, Risk Management, Asia Pacific

Hong KongIT & Infrastructure

Listed on Santander’s official careers site. Posted October 16, 2026. Check that it is still open and apply there.

Apply on Santander’s careers site →

Job description

Analyst, IT & Cyber Risk Control, Risk Management, Asia Pacific Country: Hong Kong As an IT & Cyber risk Analyst, you will provide an independent oversight over Technology and Cyber-Security risks and controls across SCIB APAC branches.

Key Responsibilities

Monitor emerging IT and cybersecurity risks, assess their potential impact on the organization, and oversee the effectiveness of related controls and the progress of remediation action plans. Support the assessment, monitoring, and reporting of the IT, cybersecurity, and business continuity risk profile across SCIB APAC branches. Support and coordinate independent assessments of technology and cybersecurity risks and controls, including maturity assessments, regulatory assessments (e.g., CRAF), and other relevant reviews.

Review Group policies and procedures and work in the transposition ensuring alignment with local regulatory requirements. Review and monitor internal and external IT and cybersecurity incidents, Key Risk Indicators (KRIs), audit findings and recommendations, and associated remediation actions.

Basic Requirements

At least 2 years of proven experience in IT security and controls functions in the Banking Industry and/or Big 4. Bachelor’s degree in computer science, Engineering, Physics, Math or related field; post graduate degree a plus. IT security certifications CISA is required; CISM, CRISC will be highly valued. High English and Mandarin Level. Spanish will be a plus. Ability to understand technical IT & Cyber process and documents (Network maps, Firewall rules, etc.)

More jobs at Santander

Similar jobs at other companies

Risk, Operational Risk, Analyst, Hong Kong

Goldman Sachs Group · Hong Kong

OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations.