Technology Risk and Control Lead (HKD$1M)

We’re looking for a dedicated professional to enhance our security posture and manage IT risks. In this role, you’ll assess and mitigate risks, ensure compliance with best practices, and drive security initiatives across the organization. If you're passionate about making an impact and promoting a risk-aware culture, apply now and help shape the future of financial services with us!

What you'll do:

• Collaborate with stakeholders in the Group CIO to establish a strong control environment and manage key risks effectively.
• Develop and implement essential documents such as policies, standards, and risk appetite statements.
• Ensure the Operational Risk Management Framework and the Risk Management Enhancement Programme (RMEP) are integrated into Group CIO operations, with available Management Information (MI) for verification.
• Conduct controls testing and recommend necessary enhancements.
• Oversee annual internal and external audits for the Group CIO.
• Participate in relevant risk management forums and committees, such as the Operational Risk Management Forum and Technology Governance Forum.
• Coordinate with second and third lines of defense to integrate their requirements into the Group CIO risk management framework.
• Assess risk management needs for emerging technologies like Cloud, Secure by Design, and AI.

What you'll bring:

• Bachelor’s degree in Information Technology, Compliance, Risk Control, or a related field.
• At least 5 years of experience in risk and control within investment banking, auditing, consulting, or similar environments.
• Knowledge of Non-Financial Risk (NFR) frameworks and regulatory compliance.
• Experience advising senior management on NFR issues.
• Strong stakeholder management skills across the three Lines of Defense (LOD).
• Fluent in English; proficiency in Mandarin is a plus.
• Relevant professional certifications, such as CISA, CISM, CRISC, CISSP, CPA, or CMIIA.