Senior InfoSec Risk & Assurance Lead (1-Year)

The Hong Kong Jockey Club; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

The Hong Kong Jockey Club is seeking a Senior Manager for Information Security Risk and Assurance on a 1-year contract. The role will drive technology risk governance, policy development, and assurance activities across the SIIS division to safeguard information security and regulatory compliance.

You will lead governance engagements, develop senior-level reports, and ensure timely risk mitigation actions while maintaining policy rigor and alignment with industry standards.

Qualifications

• Minimum 10 years’ experience in information security or related fields.
• Bachelor and/or postgraduate degree in IT, IS, or related discipline.
• Proven track record in leading technology risk and cyber security maturity assessments.
• Experience with large-scale IT systems and risk management frameworks.
• Exposure to legacy and modern platform technologies.
• Certifications such as CISA, CISSP, CRISC are preferable.

Responsibilities

• Coordinate end-to-end operation of Technology Risk committees and governance forums.
• Develop committee papers, reports, and presentations for senior management.
• Prepare meeting minutes and maintain action logs to closure.
• Project manage risk and governance activities with timelines and dependencies.
• Maintain and update the Information Security Policy framework.
• Monitor regulatory requirements and coordinate policy updates with SMEs.
• Deliver regular technology risk reporting and maturity scorecards.

Skills

Technology risk management

Cyber security

Governance frameworks

Stakeholder collaboration

KRIs monitoring

Policy development

Education

IT degree (Bachelor/PG)

Job description

The Hong Kong Jockey Club is seeking a Senior Manager for Information Security Risk and Assurance on a 1-year contract. The role will drive technology risk governance, policy development, and assurance activities across the SIIS division to safeguard information security and regulatory compliance.

You will lead governance engagements, develop senior-level reports, and ensure timely risk mitigation actions while maintaining policy rigor and alignment with industry standards.