Director - Technology Risk Governance and Assurance

Why Apply? * Be part of a respected organization with a commitment to innovation. * Play a key role in developing and implementing robust risk management strategies. * Collaborate with a team of experts dedicated to ensuring cyber resilience. If you’re ready to take the next step in your career, apply now and help shape the future of cyber risk management!

What you'll do:

• Strategic Development: Formulate and execute comprehensive strategies and frameworks to govern cyber risk management effectively.
• Risk Management Oversight: Provide expert guidance on cyber risk management, encompassing the identification, assessment, and mitigation of risks.
• Risk Monitoring: Continuously monitor and evaluate risk levels, ensuring that appropriate controls and measures are in place to manage identified risks effectively.
• Reporting Mechanisms: Design and maintain advanced reporting systems to deliver timely and precise information on cyber risks to senior management and the board.
• Risk Appetite Establishment: Define and oversee the organization’s risk appetite, ensuring alignment with business objectives.
• Policy Development: Lead the creation and upkeep of cybersecurity policies, procedures, and guidelines, integrating risk management best practices based on NIST frameworks and industry standards.
• Cybersecurity Awareness Promotion: Champion the enhancement of cybersecurity awareness within the organization, fostering a culture of security among staff.
• Business Continuity Collaboration: Work collaboratively with senior leadership and business units to develop and regularly test robust business continuity plans.
• Risk Assessment Leadership: Direct and manage the planning, execution, and documentation of comprehensive risk assessments across the organization, with a strong focus on cyber risks.
• Control Reviews: Conduct in-depth evaluations of the design and effectiveness of controls implemented to mitigate identified cyber risks.
• Risk Analysis and Prioritization: Analyze and prioritize cyber risks based on their potential impact and likelihood, ensuring senior-level visibility and action.

What you'll bring:

• University graduate in Computer Science / Information Technology or equivalent.
• 10 years or more of working experience focusing on technology risk or information security management in large organizations (i.e., experience focusing on 2nd LoD, 1.5LoD, or prior working experience in IT Audit are strong advantages)
• Proven track record in assessing and quantifying technology, cyber and IT operational risks, assess mitigation measures, and provide practical recommendations on risk mitigation controls
• Passionate in learning and understanding the industry best practices and trends on technology risk management
• Fluency in written and spoken English (Fluency in Chinese/Cantonese is a plus)
• Equips with strong stakeholders management skills
• Eligibility to work in Hong Kong