IT and technology risk assessment coordinator

Talent Pro Recruitment Company Limited; Hong Kong; On-site; HKD 350,000 - 520,000; Full time

Job summary

Talent Pro Recruitment Company Limited is seeking an IT and technology risk assessment coordinator in Hong Kong to oversee third-party security risk management and GRC activities. The role focuses on evaluating vendor security, tracking risk remediation, and coordinating across business units and vendors.

The ideal candidate will have 1–3 years of information security or TPRM experience, with a degree in a related field, and strong analytical skills.

Qualifications

• 1–3 years of experience in information security, technology risk, third-party risk management (TPRM) or GRC
• Degree or Diploma in information security, cybersecurity, computer science, technology risk, or related field
• Strong analytical and evidence-driven mindset with hands-on experience reviewing security controls

Responsibilities

• Evaluate third-party vendor risks by reviewing security questionnaires, policies, certifications (e.g., ISO 27001), and assessment reports.
• Identify security gaps or control deficiencies, document residual risks, and follow up with stakeholders to ensure remediation.
• Liaise between business units, technical teams, and external vendors to clarify responses, obtain evidence, and close items.
• Maintain audit-ready records and prepare risk summaries and status reports for management.
• Support ongoing monitoring of high-risk vendors and contribute to refining assessment methodologies and governance workflows

Skills

Analytical thinking

Evidence-driven

Multi-tasking

Security controls review

Education

Information Security Degree

Cybersecurity Degree

Computer Science Degree

Technology Risk Degree

Job description

IT and technology risk assessment coordinator

This role focuses primarily on Third-Party / Vendor Security Risk Management (TPRM) and Security Governance, Risk & Compliance (GRC). The coordinator is responsible for evaluating, tracking, and mitigating cybersecurity risks associated with external vendors and partners.

Key Responsibilities

Vendor Security Assessments: Evaluate third-party vendor risks by reviewing security questionnaires, policies, certifications (e.g., ISO 27001), and assessment reports.

Risk & Remediation Tracking: Identify security gaps or control deficiencies, document residual risks, and follow up with stakeholders to ensure issues are remediated.

Stakeholder Coordination: Liaise between business units, technical teams, and external vendors to clarify responses, obtain evidence, and resolve open items.

Reporting & Audit Readiness: Maintain accurate assessment records for audit trails and prepare risk summaries and status reports for management.

Continuous Process Improvement: Support ongoing monitoring of high-risk vendors and contribute to refining assessment methodologies and governance workflows.

Requirements & Qualifications

Experience: 1–3 years in Information Security, Technology Risk, Third-Party Risk Management (TPRM), IT Audit, or Security GRC.

Education: Degree/Diploma in Information Security, Cybersecurity, Computer Science, Technology Risk, or a related field.

Skills: Strong analytical and evidence-driven mindset, multi-tasking skills, and hands-on experience reviewing security controls.

Languages: Fluent written and verbal communication skills in both English and Cantonese.

Preferred Experience: Familiarity with third-party risk, cloud security, AI security risk, application security, or operational resilience.