Security Risk & Compliance Coordinator

Michael Page; Hong Kong; On-site; HKD 420,000 - 540,000; Full time

Job summary

Michael Page is recruiting a Security Risk Coordinator in Hong Kong for a leading insurance company. The role focuses on vendor security assessments, risk reviews, and security assurance activities to evaluate risks and ensure control effectiveness.

You will review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence, identifying gaps and remediation needs. Strong communication across stakeholders is essential in English and Cantonese.

Qualifications

• Degree or Diploma in Information Security, Cybersecurity, Computer Science, Information Systems, Technology Risk, or a related discipline.
• 2-4 years of experience in Information Security, Technology Risk, IT Audit, Security Governance, Risk & Compliance, or Third-Party Risk Management.
• Experience reviewing security controls, questionnaires, and supporting evidence is preferred.
• Good understanding of information security principles, technology risks, and security control frameworks.
• Exposure to third-party/vendor risk, cloud security, AI security, application security, outsourcing, or operational resilience is advantageous.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Effective stakeholder management and communication skills, with the ability to work across business, technical, and vendor teams.
• Excellent written and verbal communication skills in English and Cantonese.
• Well-organized with the ability to manage multiple assessments and priorities simultaneously.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 are desirable but not required.

Responsibilities

• Conduct vendor security assessments and assurance reviews to evaluate security risks and control effectiveness.
• Review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence to assess control adequacy.
• Identify security gaps, control weaknesses, exceptions, and residual risks, and support remediation planning and tracking.
• Coordinate with business stakeholders, technical teams, and vendors to gather information and resolve assessment queries.
• Track and follow up on security findings, risks, and remediation actions through to closure.
• Maintain accurate assessment records, risk registers, action plans, and supporting documentation for audit and compliance purposes.
• Support ongoing monitoring and periodic reviews of third-party vendors based on risk profile and criticality.
• Prepare risk summaries, assessment reports, management updates, and stakeholder communications.
• Contribute to the continuous improvement of security assessment methodologies, processes, templates, and governance frameworks.

Skills

Analytical thinking

Stakeholder management

Communication (EN/Cantonese)

Documentation & record-keeping

Education

Degree or Diploma in Information Security, Cybersecurity, Computer Science, Information Systems, Technology Risk, or related discipline

Tools

CISA

CISM

CRISC

CISSP

ISO 27001

Job description

Michael Page is recruiting a Security Risk Coordinator in Hong Kong for a leading insurance company. The role focuses on vendor security assessments, risk reviews, and security assurance activities to evaluate risks and ensure control effectiveness.

You will review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence, identifying gaps and remediation needs. Strong communication across stakeholders is essential in English and Cantonese.