Assistant Vice President - Group Risk Management - IT Risk

Hong Kong Exchanges & Clearing Ltd; Hong Kong; On-site; HKD 850,000 - 1,350,000; Full time

Job summary

Hong Kong Exchanges & Clearing Ltd is seeking an AVP in the IT Risk team to lead technology risk assessments, advisory services, and governance initiatives across critical systems and infrastructure. The role focuses on evaluating risk practices, enhancing resilience, and collaborating with regulators and peers.

The ideal candidate will have extensive experience in technology risk management within financial services, robust communication skills in English and Chinese, and professional

Qualifications

• At least 6 to 8 years of relevant experience in technology risk management, preferably within financial services.
• Strong knowledge of technology risk governance, controls and risk management practices.
• Knowledge of cloud computing, AI, DLT, APIs and other emerging technologies.
• Professional certifications such as CISA, CISSP, CRISC or CISM preferred.
• Excellent English and Chinese communication; Putonghua advantageous.

Responsibilities

• Perform technology risk assessments by evaluating risk identification, assessment and management practices.
• Provide technology risk advisory to stakeholders throughout project lifecycles and programs.
• Lead enhancement of technology risk and resilience initiatives and incident management.
• Oversee governance, control frameworks and remediation of material risks.
• Identify and monitor evolving technology-related risks and escalate as needed.
• Prepare technology risk reports for governance forums and senior management.
• Support collaboration with regulators, exchange peers and internal stakeholders on risk matters.

Skills

Influencing skills

Stakeholder management

Communication skills

Bilingual in English and Chinese

Putonghua advantageous

Organisational / time management

Technology risk governance

Risk assessment & governance

Education

CISA

CISSP

CRISC

CISM

Job description

We’re home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day.

HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "ToConnect,PromoteandProgressour Markets and the Communities they support for the prosperity of all."

Job Summary

The position is an AVP in the IT Risk team.

Job Duties

• Perform technology risk assessments by evaluating the adequacy and effectiveness of risk identification, risk assessment, and risk management practices implemented by business and technology functions, covering critical business operations, application systems, and technology infrastructure.
• Provide technology risk advisory to business and technology stakeholders throughout project lifecycles, change initiatives, and strategic programs to ensure technology risks are appropriately identified, assessed, and managed.
• Lead the enhancement of technology risk and resilience initiatives, incident management and response activities.
• Oversee the effectiveness of technology risk governance, control frameworks, and remediation plans, ensuring material risks and control deficiencies are appropriately addressed, monitored, and escalated.
• Identify, evaluate, and monitor evolving technology-related risks; escal material risks to the relevant stakeholders in a timely manner, and provide recommendations for risk mitigation and remediation.
• Prepare technology risk reports and management information for governance forums, risk committees, and senior management, providing clear risk insights and recommendations to support informed decision-making.
• Support the maintenance of effective relationships and collaboration with regulators, exchange peers, industry partners, and internal stakeholders on matters relating to technology risk and resilience.

Job Requirements

• A self-motivated, reliable, collaborative, and proactive individual with strong influencing skills and excellent written and verbal communication abilities. Capable of effectively communicating technology risk matters to a broad range of technical and non-technical audiences, including business stakeholders and senior executives. Proficiency in English and Chinese is required, while Putonghua would be an advantage.
• Strong organisational and task management skills, with the ability to prioritise effectively, manage multiple assignments concurrently, and consistently deliver high-quality outcomes with minimal supervision.
• Strong stakeholder management and interpersonal skills, with the ability to engage stakeholders in a timely and effective manner, manage expectations, and achieve alignment on key objectives and outcomes.
• At least 6 to 8 years of relevant experience in technology risk management, preferably within the financial services sector or in professional services supporting financial services clients. Demonstrated knowledge of technology risk governance, controls, and risk management practices from both operational and strategic perspectives.
• Strong understanding of industry-leading practices for managing technology risk, cybersecurity, and operational resilience, including emerging risks associated with cloud computing, artificial intelligence, distributed ledger technology, smart contracts, APIs, and other evolving technologies.
• Solid experience in technology risk assessments, control reviews, audits, project risk reviews, and/or risk management related to emerging technologies and technology transformation initiatives.
• Professional certifications such as CISA, CISSP, CRISC, CISM, or other relevant technology risk, cybersecurity, or audit qualifications are preferred. Additional certifications or accreditations in cloud computing, artificial intelligence, DLT, or other emerging technologies would be an advantage.
• General knowledge of exchange operations, financial market infrastructure, and applicable regulatory requirements and industry practices would be highly regarded.

HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.