AVP/Manager - CyberSecurity/Tech Risk/ IT Audit - Inhouse- 70-90K+Bonus

PrimePeak Group Limited; Hong Kong; On-site; HKD 70,000 - 90,000; Full time

Job summary

PrimePeak Group Limited is seeking an AVP/Manager for CyberSecurity, Tech Risk and IT Audit to strengthen inhouse controls across the group.

The role requires hands-on experience in IT security, risk assessments, audits and governance, with strong communication in Chinese and English and existing professional credentials.

You will lead risk-based audits, develop control frameworks, report to senior management, and stay abreast of regulatory changes and industry best practices.

Qualifications

• Hands-on team player with can-do attitude and adaptability.
• Experience in Tech Risk Assessment, IT Audit, or Cybersecurity (1+ domain).
• 3–20+ years in relevant roles; managerial track (Manager/AVP/VP).
• Professional credentials such as CISA, CISSP, CRISC preferred.

Responsibilities

• Perform end-to-end, risk-based operational and governance audits across corporate entities to evaluate and strengthen group-wide internal controls.
• Evaluate and manage technology risks assessment across business operations, establishing risk frameworks to ensure system stability and regulatory compliance.
• Audit IT General Controls (ITGCs), application controls, and infrastructure to identify vulnerabilities, safeguard systems, and ensure operational integrity.
• Assess, monitor, and enhance security defenses, incident response protocols, and data protection practices to safeguard assets against emerging cyber threats.
• Lead and execute comprehensive IT audits and technology risk assessments to pinpoint security vulnerabilities, operational risks, and compliance gaps.
• Develop, implement, and maintain risk management strategies and internal control frameworks to protect group-wide infrastructure and data assets.
• Continually evaluate IT security measures to proactively detect, monitor, and mitigate emerging threats.
• Partner with cross-functional teams to maintain strict compliance with regulatory requirements and industry standards.
• Draft high-quality audit reports, risk evaluations, and incident summaries, presenting actionable recommendations directly to senior management.
• Keep abreast of evolving technology risk landscapes, cyber security developments, and regulatory trends to strengthen the organization’s risk posture.

Skills

Team player

Problem solving

Attention to detail

Communication

Bilingual Chinese/English

Education

CISA

CISSP

CRISC

Job description

AVP/Manager - CyberSecurity/Tech Risk/ IT Audit - Inhouse- 70-90K+Bonus

We are looking for self-motivated professionals across multiple seniority levels. Proven background in Group-Level Cybersecurity or Tech Risk or IT Audit.

Key Responsibilities

Perform end-to-end, risk-based operational and governance audits across corporate entities to evaluate and strengthen group-wide internal controls.

Evaluate and manage technology risks assessment across business operations, establishing risk frameworks to ensure system stability and regulatory compliance.

Audit IT General Controls (ITGCs), application controls, and infrastructure to identify vulnerabilities, safeguard systems, and ensure operational integrity.

Assess, monitor, and enhance security defenses, incident response protocols, and data protection practices to safeguard assets against emerging cyber threats.

Audits & Risk Assessments: Lead and execute comprehensive IT audits and technology risk assessments to pinpoint security vulnerabilities, operational risks, and compliance gaps.

Risk Strategy & Governance: Develop, implement, and maintain risk management strategies and internal control frameworks to protect group-wide infrastructure and data assets.

Security & Threat Oversight: Continually evaluate IT security measures to proactively detect, monitor, and mitigate emerging threats.

Regulatory Alignment: Partner with cross-functional teams and key stakeholders to maintain strict compliance with relevant regulatory requirements and industry standards.

Executive Reporting: Draft high-quality audit reports, risk evaluations, and incident summaries, presenting actionable recommendations directly to senior management.

Industry Insights: Keep abreast of evolving technology risk landscapes, cyber security developments, and regulatory trends to continuously strengthen the organization’s risk posture.

Requirements

Hands-on team player with a can-do attitude, adaptable mindset, and willingness to tackle diverse challenges

Demonstrated professional experience in any 1 or more of the following domains is highly welcomed - Tech Risk Assessment, IT Audit, or Cybersecurity

Professional experience from 3 - 20+ years. We are actively hiring for Manager, AVP, and VP positions.

Deep understanding of IT security frameworks, regulatory guidelines, and enterprise risk management practices.

Strong problem-solving capabilities with high attention to detail and precision.

Demonstrated ability to manage multiple priorities independently in a fast-paced environment.

Professional credentials such as CISA, CISSP, CRISC, or equivalent are highly preferred.

Prior experience working in multinational (MNC) or complex corporate structures is a strong plus.

Exceptional written and verbal communication skills in Chinese and English.

Candidates with less years of relevant experience will also be considered.