Senior Manager (Internal Audit/Governance + ESG - NGO)

A public organisation in Hong Kong seeks a Senior Manager to strengthen internal audit, governance, and ESG frameworks, advising senior leadership on risk, compliance, and data governance while enhancing organisational integrity and sustainable public value.

Key responsibilities:

• Governance, Risk, and Compliance Leadership: Lead enterprise governance, ERM, and internal control frameworks while advising senior leadership on governance, risk, compliance, and ESG matters, translating regulatory developments into actionable organisational strategies
• Data Governance and Privacy Oversight: Act as functional Data Officer overseeing data governance, classification, and ethical data use, ensuring compliance with PDPO and global standards, including protection of sensitive data such as genetic/genomic information
• Compliance Monitoring and Risk Mitigation: Drive enterprise-wide compliance monitoring and risk management, maintaining the risk register and ensuring timely identification, escalation, and remediation of regulatory, operational, and reputational risks
• Policy Management and IP Governance: Oversee end-to-end policy lifecycle and Intellectual Property governance framework, ensuring robust documentation, control effectiveness, and alignment with regulatory requirements
• Audit Coordination: Coordinate internal and external audit activities, including Audit and Risk Committees, ensuring effective resolution of findings and embedding of audit recommendations into governance processes
• ESG Integration: Lead integration of ESG principles into governance frameworks, aligning policies, disclosures, and reporting practices with evolving global sustainability standards

Candidate profile:

• Minimum 12 years’ experience in governance, regulatory compliance, internal audit, or related control functions within complex organisations
• Strong working knowledge of Enterprise Risk Management (ERM), internal control frameworks, and regulatory compliance systems including data governance and IP governance structures
• Experience within highly regulated environments in Hong Kong, with exposure to public sector, financial services, or healthcare/life sciences handling sensitive data advantageous
• Hands-on experience managing data governance, privacy compliance, and sensitive personal data (e.g. genetic/genomic data) in line with PDPO and global standards
• Proven ability in policy drafting, governance framework development, and navigating complex Hong Kong regulatory requirements
• Strong background in risk assessment, compliance monitoring, audit coordination, and remediation tracking across enterprise-level risk landscapes
• Excellent stakeholder management skills with experience engaging senior leadership and board committees, supported by strong analytical capability and relevant certifications (CIA, CPA, CISA, CGP, CRMA preferred)

About the company:

A public research organisation focuses on advancing large-scale science and data-driven innovation for long-term societal benefit. It offers a collaborative, purpose-driven environment that values integrity, continuous learning, and future-focused development.

Keywords: internal audit, data governance, ESG frameworks, compliance monitoring, risk mitigation, public research firm

What’s next:

Drive impactful, future-focused research in a purpose-driven public organisation shaping innovation and societal outcomes. Apply now!