Regulatory Security & Compliance Lead for FinTech

OSL; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

OSL is seeking an experienced Security & Compliance Specialist/Manager to join its Information Security team in Hong Kong. You will bridge technical cyber security with regulatory compliance, upholding security frameworks and facilitating external audits.

You will lead HK regulatory alignment, manage ISO 27001, SOC 2 Type II, and PCI-DSS efforts, and drive enterprise-wide policy and awareness. Collaboration with IT, Ops, and auditors will be essential.

Qualifications

• Strong knowledge of Hong Kong financial regulations (SFC VASP guidelines, HKMA SPM/OR-1/TM-E-1).
• Hands-on experience managing ISO 27001, SOC 2 Type II, or NIST CSF frameworks.
• Solid understanding of cloud security (AWS/GCP), API security, and modern DevSecOps practices.

Responsibilities

• Regulatory compliance & alignment with HKMA/SFC; map security requirements and prepare reporting.
• Lead and manage audits: ISO 27001, SOC 1/2 Type II, PCI-DSS; coordinate third-party audits.
• Establish TPRM, update information security policies and SOPs; deliver security awareness training.
• Support incident response from regulatory perspective; ensure BCP/DR testing compliance.

Skills

Regulatory knowledge

Communication skills

Security governance

Policy drafting

English & Chinese

Job description

OSL is seeking an experienced Security & Compliance Specialist/Manager to join its Information Security team in Hong Kong. You will bridge technical cyber security with regulatory compliance, upholding security frameworks and facilitating external audits.

You will lead HK regulatory alignment, manage ISO 27001, SOC 2 Type II, and PCI-DSS efforts, and drive enterprise-wide policy and awareness. Collaboration with IT, Ops, and auditors will be essential.