Senior IT Risk & Cybersecurity Manager

PrimePeak Group Limited; Hong Kong; On-site; HKD 70,000 - 90,000; Full time

Job summary

PrimePeak Group Limited is seeking an AVP/Manager for CyberSecurity, Tech Risk and IT Audit to strengthen inhouse controls across the group.

The role requires hands-on experience in IT security, risk assessments, audits and governance, with strong communication in Chinese and English and existing professional credentials.

You will lead risk-based audits, develop control frameworks, report to senior management, and stay abreast of regulatory changes and industry best practices.

Qualifications

• Hands-on team player with can-do attitude and adaptability.
• Experience in Tech Risk Assessment, IT Audit, or Cybersecurity (1+ domain).
• 3–20+ years in relevant roles; managerial track (Manager/AVP/VP).
• Professional credentials such as CISA, CISSP, CRISC preferred.

Responsibilities

• Perform end-to-end, risk-based operational and governance audits across corporate entities to evaluate and strengthen group-wide internal controls.
• Evaluate and manage technology risks assessment across business operations, establishing risk frameworks to ensure system stability and regulatory compliance.
• Audit IT General Controls (ITGCs), application controls, and infrastructure to identify vulnerabilities, safeguard systems, and ensure operational integrity.
• Assess, monitor, and enhance security defenses, incident response protocols, and data protection practices to safeguard assets against emerging cyber threats.
• Lead and execute comprehensive IT audits and technology risk assessments to pinpoint security vulnerabilities, operational risks, and compliance gaps.
• Develop, implement, and maintain risk management strategies and internal control frameworks to protect group-wide infrastructure and data assets.
• Continually evaluate IT security measures to proactively detect, monitor, and mitigate emerging threats.
• Partner with cross-functional teams to maintain strict compliance with regulatory requirements and industry standards.
• Draft high-quality audit reports, risk evaluations, and incident summaries, presenting actionable recommendations directly to senior management.
• Keep abreast of evolving technology risk landscapes, cyber security developments, and regulatory trends to strengthen the organization’s risk posture.

Skills

Team player

Problem solving

Attention to detail

Communication

Bilingual Chinese/English

Education

CISA

CISSP

CRISC

Job description

PrimePeak Group Limited is seeking an AVP/Manager for CyberSecurity, Tech Risk and IT Audit to strengthen inhouse controls across the group.

The role requires hands-on experience in IT security, risk assessments, audits and governance, with strong communication in Chinese and English and existing professional credentials.

You will lead risk-based audits, develop control frameworks, report to senior management, and stay abreast of regulatory changes and industry best practices.