Assistant Manager / Senior Specialist (Risk Management)

InfoTech Services (Hong Kong) Limited; Hong Kong; On-site; HKD 420,000 - 780,000; Full time

Job summary

InfoTech Services (Hong Kong) Limited invites a seasoned risk professional to join our financial institution-focused team. You will coordinate risk management processes, support enterprise risk frameworks, and work with IT, operations, and cyber security to identify controls and monitor risk posture.

The role requires at least 5 years in technology/operational risk management, familiarity with HK regulatory standards (HKMA CFI 2.0, ISO/IEC 27001), and professional certifications such as CISA or

Qualifications

• University degree preferably in computer science, information technology, information systems, business or related discipline.
• Minimum 5 years of experience in technology / operational risk management, information security or IT auditing.
• Knowledge of risk management frameworks and regulatory requirements (HKMA, ISO/IEC 27001).
• CISA, CISSP and/or other equivalents preferred.

Responsibilities

• Assist in coordination of risk management processes.
• Assist in development and implementation of enterprise risk management framework, strategies, policy and procedures.
• Coordinate with business units to establish a risk management process for IT, operations, and cyber security, including risk identification, control design and monitoring.

Skills

Risk management

Communication

Documentation

Teamwork

Education

University degree in IT or related field

Tools

HK regulatory standards

ISO/IEC 27001

CFI 2.0 (HKMA)

Job description

Number Of Vacancy 1

Relevant Field Technical Support

Nature Permanent

Employer Business financial institution

Location Base Hong Kong

Work Outside Current Location N/A

Monthly Salary Range HK$ N/A - N/A

Duties

• Assist in coordination of risk management processes;
• Assist in development and implementation of enterprise risk management framework, - strategies, policy and procedures;
• Coordinate with business units to establish a risk management process for information technology, operation, and cyber security, including risk identification, control design and implementation, and ongoing monitoring;
• Assist in conducting risk assessment on existing and new services;
• Assist business units in remediation of internal control weaknesses identified in audit reviews and assessments;
• Provide support for regular reporting and metrics to present the risk posture of the company;
• Assist in providing advice to all business units on the company’s new initiatives and existing operations from a risk and control perspective;
• Assist in providing training to all staff members to promote a culture of risk awareness;
• Perform other duties as assigned by supervisor(s).

Yrs of Total Post-Quali Exp 5.0

Yrs of Relevant Exp 0.0

Requirements

• University degree preferably in computer science, information technology, information system, business or related discipline;
• Minimum 5 years of experience in technology / operational risk management, information security or IT auditing, preferably gained from financial institutions or professional consulting firms;
• Expertise in various aspects of risk management as well as the services and operations of the financial sector;
• Knowledge of risk management frameworks, relevant global / local regulatory requirements and industry standards such as HKMA CFI 2.0 framework, CSA STAR, ISO/IEC 27001 standard;
• CISA, CISSP and/or other equivalent certifications preferred;
• Team player with sound interpersonal, communication and documentation skills;
• Good command of written and spoken English and Chinese;
• Candidate with less experience may be considered as Senior Specialist (Risk Management).

Last Update 02 Oct 2026