IT Director / Senior Manager

Cobo; Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

Cobo in Hong Kong seeks an experienced technology leader to own IT governance, platform resilience, cybersecurity and the regulated control environment supporting custody and wallet operations. You will stay close to architecture, controls and incident response, and be credible with engineers, auditors, the Board and the SFC to ensure robust technology governance and regulatory compliance.

This role requires engaging regulators, coordinating inspections, and guiding risk-based technology

Qualifications

• 5-8+ years in tech/security/tech-risk leadership, incl. 3+ years senior in an SFC-regulated firm
• First-hand SFC experience — led or materially supported licence application, inspection, or remediation
• Deep working knowledge of VATP licensing regime under AMLO, SFC guidelines, and related cybersecurity expectations
• Eligible and willing to serve as Board-appointed MIC-IT with genuine HK presence
• Degree in CS, Engineering, Information Systems, Cybersecurity, or equivalent experience

Responsibilities

• Own IT governance, platform resilience, cybersecurity and regulatory control environment for custody and wallet operations.
• Liaise with regulators and internal stakeholders; coordinate inspections and regulatory submissions.
• Partner with Compliance, Legal, Risk, and Board to ensure robust technology governance and internal controls.
• Define Hong Kong technology strategy aligned with global roadmaps; lead architecture, security and incident response.
• Oversee security assessments, audits, and regulatory readiness; ensure timely reporting and remediation.

Skills

Tech leadership

SFC-regulated experience

Regulatory liaison

IT governance

Incident response

Education

CS/Engineering/IS/Cybersecurity degree

Job description

Role Responsibilities:

The role owns IT governance, platform resilience, cybersecurity and the regulated control environment supporting custody and wallet operations.

It combines deep technical judgement with direct regulatory accountability: the successful candidate must be credible with engineers, auditors, the Board and the SFC, and must be willing to stay close to architecture, controls and incident response.

Regulatory & Governance

• Serve as the SFC MIC – Information Technology, accountable for technology governance, cybersecurity, operational resilience, and business continuity.


• Act as the primary technology liaison with the SFC and other regulators, leading inspections, regulatory submissions, incident reporting, and ongoing supervisory engagements.


• Establish, maintain, and continuously enhance IT governance, cybersecurity, outsourcing, cloud, and operational risk frameworks to meet SFC licensing requirements and regulatory expectations.


• Partner with Responsible Officers, Compliance, Legal, Risk, and the Board to ensure robust technology governance, effective internal controls, and regulatory compliance.

Technology Leadership

• Define and execute the Hong Kong technology strategy, ensuring alignment with global engineering, product, and security roadmaps while meeting local regulatory obligations.


• Lead the design, security, and resilience of technology infrastructure supporting institutional digital asset custody, wallet infrastructure, and critical business systems.


• Drive technology risk management across infrastructure, cloud platforms, third-party vendors, disaster recovery, and business continuity planning.


• Build, lead, and develop a high-performing local technology organization while fostering close collaboration with global engineering teams.


• Own enterprise information security, cybersecurity governance, access management, incident response, and cyber resilience across the Hong Kong entity.


• Oversee security assessments, penetration testing, technology audits, vulnerability remediation, and regulatory readiness.


• Lead cybersecurity incident management, ensuring timely escalation, regulatory notification, and post-incident remediation in accordance with SFC expectations.


• Maintain comprehensive documentation and evidence to support internal audits, external audits, and regulatory examinations.

Role Requirements:

Must-Have

• At least 5-8+ years in tech/security/tech-risk leadership, incl. 3+ years senior in an SFC-regulated firm, licensed exchange, bank, broker, or custodian


• First-hand SFC experience — led or materially supported a licence application, inspection, or remediation


• Deep working knowledge of the virtual asset trading platform (VATP) licensing regime under the AMLO, applicable SFC guidelines and circulars, the SFC senior management/MIC framework, cybersecurity expectations for licensed firms, outsourcing and electronic-record controls.


• Eligible and willing to serve as Board-appointed MIC-IT with genuine HK presence


• Degree in CS, Engineering, Information Systems, Cybersecurity, or equivalent experience

Preferred

• Current/former MIC-IT, CIO, CTO, CISO, or Head of Technology Risk at an SFC-licensed corporation / VATP


• CISSP, CISM, CISA, CRISC, or CCSP or other relevant security, audit or cloud certification


• Experience operating institutional custody at scale and working with Big Four or specialist assessors on direct assurance, regulatory attestation or technology audits