Manager/AM, Technology Risk & Cyber Resilience
Posted
Description
Salary: open
What You'll Do
As a key member of the Technology Risk & Cyber Resilience function, you will:
- Lead and enhance the organisation's technology risk management framework.
- Drive cyber resilience and operational resilience initiatives across critical business services.
- Assess technology, cyber, and third-party risks, ensuring alignment with regulatory and industry standards.
- Partner with technology, security, business, and compliance stakeholders to strengthen control environments.
- Support regulatory examinations, audits, and risk reviews.
- Monitor emerging cyber threats, technology risks, and regulatory developments.
- Conduct risk assessments, control testing, and remediation tracking.
- Advise senior management on risk exposures and resilience strategies.
- Contribute to governance forums, risk committees, and executive reporting.
- Champion a strong risk and security culture across the organisation.
Requirements
- Bachelor's degree or above in Information Technology, Computer Science, Cybersecurity, Information Systems, Risk Management, or related disciplines.
- Proficiency in both English and Chinese (Cantonese and/or Mandarin), with strong written and verbal communication abilities.
- At least 5 years of experience in Technology Risk, Cybersecurity, Information Security, IT Audit, IT Compliance, Operational Resilience, Technology Controls, or related areas.
- Experience gained from Big 4 consulting firms, cybersecurity consulting firms, banks, insurance companies, asset management firms, or other financial services institutions is highly preferred.
- Strong knowledge of technology risk management, cyber resilience, operational resilience, information security governance, IT controls, regulatory compliance, and third-party risk management.
- Familiarity with industry frameworks and standards such as NIST, ISO 27001, COBIT, Cyber Resilience Frameworks, and Operational Resilience Frameworks.
- Professional certifications such as CISA, CISSP, CISM, CRISC, ISO 27001 Lead Auditor, or related certifications are highly preferred.
- Excellent communication and stakeholder management skills.
What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.