IT & Cyber Compliance Manager

financial Institution; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

A Hong Kong–based financial Institution seeks an experienced information security professional to lead and coordinate technology risk and cyber security efforts. The role reports to the Senior Manager or Department Head and involves updating policies, incident handling, and liaison with regulators.

Strong English and Chinese language skills are essential, with knowledge of ISO 27001 and HKMA guidelines preferred. This role offers growth in a regulated, high‑stakes environment.

Qualifications

• Bachelor's degree in information technology or related discipline.
• Minimum 5 years in information/cyber security or tech risk management.
• Solid understanding of fintech, data privacy and industry practices.
• Familiarity with ISO 27001, CSA STAR, HKMA SPM, and CISA/CISM/CCSP/CEH/CREST.
• Team player with good communication in English and Chinese.

Responsibilities

• Report to Senior Manager on technology compliance, cyber security, and information security.
• Establish, update, and maintain unit policies, procedures, and plans.
• Participate in cyber/information security drills by regulators.
• Assist Head in liaising with authorities and regulators.
• Coordinate incident reporting for IT, cybersecurity, and system incidents.
• Track latest cyber security regulatory requirements and identify enhancements.
• Collaborate with other departments on security controls and improvements.
• Conduct security risk assessments, technical assessments, audits, and reporting.
• Perform ad hoc duties or projects as assigned.

Skills

Information security

Cyber security

Technology risk

Regulatory know-how

Communication

Education

University degree in IT/cybersecurity

Tools

ISO 27001

HKMA SPM

CFI 2.0 framework

CISA

CISM

CISSP

Job description

A Hong Kong–based financial Institution seeks an experienced information security professional to lead and coordinate technology risk and cyber security efforts. The role reports to the Senior Manager or Department Head and involves updating policies, incident handling, and liaison with regulators.

Strong English and Chinese language skills are essential, with knowledge of ISO 27001 and HKMA guidelines preferred. This role offers growth in a regulated, high‑stakes environment.