IT Risk & Controls Executive — Strategy & Assurance

Hong Kong Exchanges and Clearing Limited; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

HKEX CTO Office and Process, Risk and Control seeks a senior technology risk professional to strengthen control testing, risk assessment and audit readiness across infrastructure, cybersecurity, cloud and applications.

You will lead Line 1.5 testing, coordinate governance with auditors and regulators, and drive measurable improvements in risk controls while partnering with technology teams and stakeholders in Hong Kong.

Qualifications

• Bachelor’s or master’s degree in computer science, information technology, engineering, or a related discipline.
• 8–12+ years of experience in technology risk, IT risk assessment, information security, or control assurance, ideally within banking, financial services, or regulated environments.
• Demonstrated experience operating in or alongside a Line 1.5 risk and control function, with strong understanding of first‑line technology operations.
• Relevant professional qualifications (e.g., CISA, CISSP, CISM) or equivalent preferred.

Responsibilities

• Design, testing & validation of technology controls across infrastructure, cybersecurity, cloud, and application environments.
• Perform independent Line 1.5 testing and thematic reviews, providing objective challenge while remaining close to BAU technology operations.
• Ensure testing approaches align with internal control frameworks, regulatory expectations, and audit standards.
• Audit readiness lead, reviewing evidence quality, control narratives, and documentation to ensure defensibility for auditors and regulators; coordinate technology responses to audit observations and regulatory reviews.
• Lead risk assessments and drive remediation to ensure control effectiveness and risk visibility.
• Develop and maintain meaningful KRIs and KPIs to monitor technology risk exposure and remediation progress; present to technology risk management committee.

Skills

Technology risk

IT risk assessment

Information security

Control assurance

Stakeholder management

Education

Bachelor’s or Master’s degree in computer science, information technology, engineering, or related discipline

Tools

CISA

CISSP

CISM

Job description

HKEX CTO Office and Process, Risk and Control seeks a senior technology risk professional to strengthen control testing, risk assessment and audit readiness across infrastructure, cybersecurity, cloud and applications.

You will lead Line 1.5 testing, coordinate governance with auditors and regulators, and drive measurable improvements in risk controls while partnering with technology teams and stakeholders in Hong Kong.