We are seeking an experienced Technology Risk Manager with over 10 years of expertise in cybersecurity and IT risk management. The ideal candidate will have a strong understanding of IT controls, risk frameworks, and regulatory requirements, particularly within the Hong Kong governance landscape.
Requirements
- Lead IT risk and control assessments across infrastructure, applications, and private cloud environments.
- Develop, maintain, and continuously improve the IT risk register.
- Manage the IT security exemption process, ensuring proper documentation and risk evaluation.
- Act as the primary point of contact for client and regulatory inquiries related to IT risk and security.
- Oversee the security documentation, including policies, procedures, and assessment reports to ensure they’re up-to-date.
- Provide oversight on the implementation of IT risk mitigation measures and escalate issues when necessary.
- Drive continuous improvement in IT risk governance and control practices.