Head of IT Risk & Controls

Global Sports Jobs Limited; Hong Kong; On-site; HKD 1,000,000 - 2,000,000; Full time

Benefits offered by this job

Dynamic working environment

Competitive benefits package

Development opportunities

Job summary

Global Sports Jobs Limited seeks a first-line risk leader for the IT Division to set the strategy for technology risk management and drive enterprise-wide governance. The role focuses on maturing the ITRC function and partnering with risk, audit, compliance, and security teams to elevate risk management as a strategic capability.

You will lead and mentor a team of risk professionals, translate appetite into practical guidance, and oversee risk governance across IT initiatives and transformations.

Qualifications

• Bachelor's degree required in a relevant discipline.
• 15+ years in technology or operational risk with leadership experience.
• Executive-level experience with C-suite or board interaction.
• Expert knowledge of risk frameworks (COBIT, NIST, ISO 27001/27005, ITIL).
• Proven ability to translate risk appetite into actionable guidance.

Responsibilities

• Define and deliver the multi-year ITRC strategy aligned with IT objectives and risk appetite.
• Lead governance forums and coordinate with Enterprise Risk, Internal Audit, Compliance, and IT Security.
• Mentor Senior Technical Managers and risk analysts, building capability and succession plans.
• Embed risk into investment, vendor, and architectural decisions with audit coordination.
• Champion risk-by-design across Agile and product delivery lifecycles.

Skills

Executive communication

Stakeholder management

Technology risk frameworks

Strategic leadership

Risk governance

Cloud/DevOps/CI-CD risk

Data governance & analytics

Education

Bachelor's degree in a relevant discipline

Master's degree or MBA in a relevant discipline

Tools

GRC platforms

Job description

Global Sports Jobs Limited seeks a first-line risk leader for the IT Division to set the strategy for technology risk management and drive enterprise-wide governance. The role focuses on maturing the ITRC function and partnering with risk, audit, compliance, and security teams to elevate risk management as a strategic capability.

You will lead and mentor a team of risk professionals, translate appetite into practical guidance, and oversee risk governance across IT initiatives and transformations.