Security Risk Officer: Vendor & Compliance Focus

Michael Page International (HK) Ltd; Hong Kong; On-site; HKD 254,000 - 304,000; Full time

Job summary

Michael Page International (HK) Ltd is seeking an IT Security and Risk Officer to coordinate security risk activities within the Insurance Technology department in Hong Kong. The role involves reviewing controls, policies, and audit reports to ensure risk adequacy and to support informed security decisions across the business.

The ideal candidate has 2–4 years in information security or technology risk, with strong analytical and stakeholder management skills, and fluency in English and

Qualifications

• Bachelor's/ Diploma in information security or related field.
• 2–4 years in information security, technology risk, IT audit, or risk management.
• Experience reviewing security controls, questionnaires, and evidence is preferred.

Responsibilities

• Coordinate security risk activities for the Technology department in the insurance sector.
• Conduct vendor security assessments and assurance reviews to evaluate risks.
• Review security questionnaires, policies, and audit reports for control adequacy.
• Identify gaps, weaknesses, exceptions, and remediation actions with tracking.
• Coordinate with stakeholders, technical teams, and vendors to resolve assessment queries.
• Maintain risk registers, action plans, and audit documentation for compliance.
• Support ongoing monitoring and periodic reviews of third-party vendors based on risk.
• Prepare risk summaries, assessment reports, and stakeholder updates.
• Contribute to improving security assessment methodologies and governance.

Skills

Information Security

Risk Management

IT Audit

Security Governance

English & Cantonese communication

Education

Degree or Diploma in Information Security or related

Certifications in information security (CISA, CISM, CRISC, CISSP, ISO 27001) desirable

Job description

Michael Page International (HK) Ltd is seeking an IT Security and Risk Officer to coordinate security risk activities within the Insurance Technology department in Hong Kong. The role involves reviewing controls, policies, and audit reports to ensure risk adequacy and to support informed security decisions across the business.

The ideal candidate has 2–4 years in information security or technology risk, with strong analytical and stakeholder management skills, and fluency in English and