Manager - Technology Compliance

InfoTech Services (Hong Kong) Limited; Hong Kong; On-site; HKD 500,000 - 700,000; Full time

Job summary

InfoTech Services (Hong Kong) Limited is seeking a qualified candidate for a permanent position focusing on technology compliance and cyber security within a financial institution. You'll report to the Senior Manager regarding technology risk matters and be responsible for maintaining compliance-related policies.

The ideal candidate should possess a university degree related to information technology and have at least 5 years of experience in the field. Strong communication skills in English and Chinese are essential for this role.

Apply via email at [e-mail].

Qualifications

• Minimum 5 years of experience in information/cyber security or technology risk management.
• Good understanding of cyber security best practices.
• Knowledge of various cyber resilience-related certifications preferred.

Responsibilities

• Report on technology compliance and cyber security matters.
• Establish and maintain policies for regulatory compliance.
• Conduct risk assessments and audits.

Skills

Interpersonal and communication skills

Problem-solving and analytical skills

Understanding of technology risk management

Knowledge of fintech

Team player

Education

University degree in information technology, information/cyber security, or computer science

Tools

ISO 27001

CISA

CISM

CISSP

Job description

Duties

• Serve a permanent position to a financial institution;
• Report to the Senior Manager or Department/Division Head on matters related to technology compliance, cyber security, and information security;
• Establish, update, and maintain the unit’s policies, procedures, guidelines, and plans, particularly those related to regulatory, compliance, and law-enforcement matters;
• Participate in cyber or information security drills initiated by industry bodies or regulators;
• Assist the Head in liaising and communicating with designated authorities or regulators;
• Assist in arranging and/or handling incident reporting matters related to IT, cybersecurity, and system incidents;
• Keep abreast of the latest cyber security‑related law‑enforcement, regulatory, and/or industry requirements to facilitate the identification of potential enhancement areas;
• Communicate and work with other departments/divisions on cyber and information security controls and enhancement matters;
• Arrange and/or conduct computer‑system security risk assessments, technical assessments, audits, and reporting according to the scope and requirements;
• Perform any other ad‑hoc duties or projects as assigned.

Requirements

• University degree, preferably in information technology, information/cyber security, computer science, or a related discipline;
• Minimum 5 years of experience in information/cyber security or technology risk management. Candidates with less experience who meet the requirements may be considered for the deputy manager position;
• Good understanding of technology risk management and cyber security best practices, with broad knowledge of fintech, data privacy, and/or industry practices;
• Knowledge of ISO 27001, CSA STAR, the HKMA SPM, the CFI 2.0 framework, technology risk management, and cyber security‑related guidelines;
• CISA, CISM, CDPSE, CRISC, CISSP, CEH, CCSP, CREST, and/or other cyber resilience‐related certifications preferred;
• Team player with sound interpersonal and communication skills;
• Red/Blue Team knowledge and experience are an advantage;
• Good problem‑solving and analytical skills;
• Good command of written and spoken English and Chinese.

Years of Total Post‑Quali Exp: 5.0

Years of Relevant Exp: 5.0

Last Update: 10 Jun 2026

Apply To: [e-mail]

Direct Line: 2836 0363