IT Risk & Governance Specialist - Financial Services

Links International; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Links International is seeking an IT Risk & Governance Specialist for a leading financial services client in Hong Kong. You will work with business, technology, and security teams to strengthen governance, resilience, and risk management across enterprise platforms.

You will develop and implement risk frameworks, perform risk assessments, and drive remediation activities in a regulated environment. Fluency in English and Chinese is required along with relevant certifications being advantageous.

Qualifications

• 5+ years in Technology Risk, Operational Risk, Information Security, IT Audit, or GRC.
• Experience in financial services, consulting, regulated industries, or large enterprises preferred.
• Familiarity with ISO 27001, CSA STAR and cybersecurity governance frameworks.
• Strong analytical, communication, stakeholder management, and documentation skills.

Responsibilities

• Support development and implementation of enterprise risk management frameworks, policies, and procedures.
• Coordinate risk management activities across technology, operations, cybersecurity, and business functions.
• Assist in risk assessments for existing operations, new services, and strategic initiatives.
• Partner with stakeholders to identify risks, implement controls, and monitor risk mitigation activities.
• Support remediation efforts arising from internal audits, risk reviews, and control assessments.
• Prepare regular risk reporting, dashboards, and management metrics.
• Provide risk and control advisory services to support business and technology initiatives.
• Assist in delivering risk awareness and training programs across the organization.
• Contribute to the continuous enhancement of governance, risk, and compliance practices.

Skills

Analytical skills

Communication skills

Stakeholder management

Documentation

Bilingual English/Chinese

Education

Bachelor's degree in IT/CS/Info Systems/Business Admin

Tools

ISO 27001

CSA STAR

Job description

IT Risk & Governance Specialist - Financial Services

Our client is a leading organization operating critical business and technology platforms within a regulated environment. The company is committed to maintaining strong governance, operational resilience, and risk management practices, offering an opportunity to work closely with business, technology, and security teams on enterprise-wide risk initiatives.

Responsibilities

• Support the development and implementation of enterprise risk management frameworks, policies, and procedures.
• Coordinate risk management activities across technology, operations, cybersecurity, and business functions.
• Assist in performing risk assessments for existing operations, new services, and strategic initiatives.
• Partner with stakeholders to identify risks, implement controls, and monitor risk mitigation activities.
• Support remediation efforts arising from internal audits, risk reviews, and control assessments.
• Prepare regular risk reporting, dashboards, and management metrics.
• Provide risk and control advisory services to support business and technology initiatives.
• Assist in the delivery of risk awareness and training programs across the organization.
• Contribute to the continuous enhancement of governance, risk, and compliance practices.

Requirements

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Business Administration, or a related discipline.
• Minimum 5 years of experience in Technology Risk, Operational Risk, Information Security, IT Audit, or Governance, Risk & Compliance (GRC).
• Experience gained within financial services, consulting firms, regulated industries, or large enterprise environments is preferred.
• Good understanding of enterprise risk management and control frameworks.
• Familiarity with standards and frameworks such as ISO 27001, CSA STAR, cybersecurity governance frameworks, and regulatory requirements.
• Experience conducting risk assessments, control reviews, and remediation tracking.
• Professional certifications such as CISSP, CISA, CRISC, CISM, or equivalent are advantageous.
• Strong analytical, communication, stakeholder management, and documentation skills.
• Fluent in English and Chinese.