AVP, Technology & Operational Risk | Cybersecurity & Blockchain

Jobtailor; Hong Kong; On-site; HKD 1,000,000 - 1,800,000; Full time

Job summary

Jobtailor in Hong Kong seeks an experienced Technology Risk Manager to lead risk oversight across technology, cybersecurity, and operational risk frameworks. You will review risk assessments, challenge stakeholders, and advise on new product changes with a focus on resiliency and regulatory alignment.

The role requires hands-on knowledge of HKMA Cyber Resilience Assessment Framework, blockchain/distributed ledger security, and relevant regulations.

Qualifications

• Bachelor’s degree or higher in CS/IT/Cybersecurity or related field.
• 10+ years of experience in technology and operational risk management.
• Knowledge of HKMA regulatory expectations on cyber and blockchain risk.

Responsibilities

• Provide risk stewardship and control oversight of technology, cybersecurity and operational risk management framework and controls
• Review and challenge stakeholders on the technology risk assessments and operational resilience
• Partner and advise business on new product change management and control design
• Act as the technology risk management subject‑matter expert on HKMA Cyber Resilience Assessment Framework
• Provide risk stewardship advisory over technology, virtual asset and payment security risk management
• Prepare independent technology, operational, cybersecurity, and virtual asset risk management reports

Skills

Risk management

Technology risk

Operational risk

Regulatory examinations

Education

Bachelor's degree or higher in CS/IT/Cybersecurity

Certifications: CISA/CISM/CISSP/CRISC

Job description

Jobtailor in Hong Kong seeks an experienced Technology Risk Manager to lead risk oversight across technology, cybersecurity, and operational risk frameworks. You will review risk assessments, challenge stakeholders, and advise on new product changes with a focus on resiliency and regulatory alignment.

The role requires hands-on knowledge of HKMA Cyber Resilience Assessment Framework, blockchain/distributed ledger security, and relevant regulations.