Senior Manager/ Director- IT Risk Governance (Multiple hirings)

Join our esteemed IT Risk Governance team, where you can take part in leading the development and implementation of our risk management framework, to drive strategic initiatives and enhance our risk management capabilities!

What you'll do:

• Assist in implementing the IT Risk Management framework within the IT Division, ensuring leadership accountability through regular updates of risk scenarios and prioritization of top risks.
• Collaborate with departments and second-line defense units to develop risk appetite statements, tolerance thresholds, and Key Risk Indicators.
• Continuously update the control library, support Risk Owners in identifying Key Controls, and monitor Key Risk Indicators through reporting and data coordination.
• Manage third-party supplier risks and provide regular updates on top risks and significant incidents.
• Support the IT Audit and Control Oversight team in executing the IT Risk Controls Assurance Programme.
• Review the incident management process, ensuring timely root cause analysis and trend analysis of incidents.

What you'll bring:

• Bachelor's Degree in Computer Studies or in relevant risk management disciplines
• Professional certification in risk management (e.g., ISO 31000) is a plus.
• Over 10 years of experience in IT operational risk management with a proven track record in leading risk functions.
• Strong ability to assess and quantify technology and operational risks, provide practical mitigation recommendations, and understand industry best practices.
• Experience in delivering risk management frameworks and a solid understanding of enterprise architecture, service management, and change management.
• Speaks fluent Cantonese/Chinese and English and equips with solid communication skills