Senior GRC & Compliance Risk Specialist

BIT Official; Hong Kong; On-site; HKD 540,000 - 900,000; Full time

Job summary

BIT is a global digital asset financial services group seeking a Compliance Program Support professional in Hong Kong. You will help implement and maintain our compliance framework, including ISO and SOC certifications, and work with internal teams to ensure regulatory alignment.

The role requires a bachelor’s degree in a technical field, at least 3 years in risk management or IT audit, and strong communication skills to explain complex requirements to colleagues and regulators.

Qualifications

• Bachelor’s degree or higher in a technical field.
• 3+ years in Security Risk Management, Governance & Compliance or IT audit.
• Experience in licensed/regulatory financial services (e.g., MAS).
• Familiar with MAS TRM Guidelines, NIST CSF, ISO 27001/27701, SOC 2, GDPR.
• Certifications such as ISO 27001 Lead Implementer/Auditor, CISA or CISSP are a plus.
• Strong analytical and communication skills.

Responsibilities

• Support ISO 27001, ISO 27701, and SOC 1/2 programs and documentation.
• Assist with third-party risk management, vendor assessments, and due diligence responses.
• Collect and organize audit evidence; track remediation with control owners.
• Identify gaps in processes and controls; suggest improvements.
• Explain compliance requirements to technical and non-technical teams.

Skills

Regulatory compliance

Risk assessment

Governance & IT audit

Analytical thinking

Communication skills

Education

Bachelor’s degree in Computer Science, Information Systems, or a related technical discipline

3 years of experience in Security Risk Management, Governance & Compliance, IT audit, or a similar role

Tools

NIST CSF

ISO 27001/27701

SOC 2

GDPR

Job description

BIT is a global digital asset financial services group seeking a Compliance Program Support professional in Hong Kong. You will help implement and maintain our compliance framework, including ISO and SOC certifications, and work with internal teams to ensure regulatory alignment.

The role requires a bachelor’s degree in a technical field, at least 3 years in risk management or IT audit, and strong communication skills to explain complex requirements to colleagues and regulators.