Senior Manager (Information Technology Risk Management)

eFinancialCareers Ltd.; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

HKMC Annuity Limited is seeking an experienced Information Security professional to govern cybersecurity risk matters, provide advisories for IT solutions, and oversee regulatory compliance across systems in Hong Kong. You will conduct cloud risk assessments, maintain risk registers, and collaborate with experts on assessments and incidents.

The role requires 8+ years in information security or risk disciplines, familiarity with insurance/financial IT regulations, and relevant certifications.

Qualifications

• Degree or equivalent in Information Security, Computer Science, or related field.
• 8+ years of experience in information security or risk management.
• Familiar with insurance/financial services IT regulatory requirements.
• Strong cloud security and application security knowledge.

Responsibilities

• Govern cybersecurity risk matters for governance and board presentation.
• Provide security advisories and recommendations for IT solutions.
• Oversee implementation of new cybersecurity regulations and controls.
• Conduct security and cloud risk assessments to identify threats and mitigations.
• Maintain security risk register and communicate risks to stakeholders.
• Collaborate with SMEs on assessments, testing, and threat intel simulations.
• Manage IT security incidents and provide timely advisories.
• Review/update security policies and control processes; perform ad hoc duties.

Skills

Information security leadership

Cloud security

Application security

Risk management

Regulatory compliance

Security governance

Penetration testing

Threat intelligence

Education

Bachelor's degree in Information Security or related

Master's degree preferred

Tools

CISSP

CISA

OSCP

CEH

ISO 27001

NIST

Job description

HKMC Annuity Limited, a wholly-owned subsidiary of The Hong Kong Mortgage Corporation Limited, is an authorized insurer to carry on long term insurance business and facilitate retirement financial planning through the provision of annuity products in Hong Kong.Job Descriptions:To assist in the governance of cybersecurity risk matters for presentation to relevant risk committees and the Board of Directors;To provide professional security advisories and recommendations for IT solutions and systems;To oversee the implementation of new cybersecurity regulations, ensuring IT risk controls are up-to-date and compliant;To conduct security and cloud risk assessment on systems and/or technical controls to identify potential security threats and vulnerabilities, and to develop strategies for risk mitigation;To maintain security risk register, and communicate the identified risks and impacts to the stakeholders;To collaborate with other subject matter experts on managing security assessments and oversee penetration testing, threat intelligence simulation attack;To manage and provide timely advices for IT security incidents;To periodically review and update security policies, operational process for security control enhancement; andTo perform other ad hoc duties as assigned from time to time.Requirements:Degree holder in Information Security, Computer Science, Information Management Systems, Risk Management or equivalent;A minimum of 8 years of experience in the field of information security, security risk or related disciplines;Familiar with regulations of insurance or financial services industry, in particular of IT related requirements;In-depth understanding of cloud security principles and best practices, with experience in securing cloud environments;Solid understanding of application security, including secure coding practices, vulnerability assessment, and secure deployment methodologies;Demonstrated track record in leading and implementing successful information security initiatives programs;Relevant certifications (e.g., CISSP, CISA, OSCP, CEH, ISO 27001, NIST, or equivalent) is an advantage; andGood command of both written and spoken English and Chinese.(Candidates with less experience will be considered as Manager.)Interested parties please send your full resume stating your current and expected salary by 28 October 2026.Please visit https://www.hkmca.hk/eng/about_us/careers.html for other application methods.Please ensure that all information provided to the HKMCA is accurate, complete and updated. Data provided which is inaccurate, misleading or incomplete may influence the process and outcome of the recruitment exercise. Please read the HKMCA Personal Information Collection Statement for Recruitment of Prospective Staff Members and Licensed Individual Insurance Agents at the HKMCA website before completing the application form. Personal data collected will be used for recruitment purposes only. Candidates not invited for interview within 8 weeks may consider their application unsuccessful.