Senior Risk & Compliance Lead – Tech, Crypto & Cyber

HKT; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

HKT is seeking a senior risk management professional to lead technology, cybersecurity and operational risk oversight for digital payment services, including fiat and cryptocurrency, and insurance-related businesses. The role aligns with HKMA and IA expectations and partners with senior management and the Board.

The position requires 10+ years in regulated financial services risk, hands-on HKMA framework knowledge, and strong blockchain security experience.

Qualifications

• 10+ years of experience in technology and operational risk management, cybersecurity assurance and advisory for regulated institutions.
• Hands-on experience with HKMA frameworks and regulatory examinations.
• Knowledge of HKMA regulated stablecoins and SFC virtual asset expectations.
• Proven experience in blockchain or distributed ledger security and key management.
• Bachelor’s degree or above in Computer Science, IT, Cybersecurity, or related disciplines.
• Certifications such as CISA, CISM, CISSP or CRISC preferred.

Responsibilities

• Provide risk stewardship and control oversight of technology, cybersecurity, and operational risk across platforms and payment systems.
• Review risk assessments, resilience, and control effectiveness; challenge timelines.
• Advise business on changes, control design, implementation, and customer servicing.
• Serve as SME on HKMA C-RAF requirements and regulatory examinations.
• Prepare risk reports for senior management and Board committees.
• Engage with HKMA and IA to ensure clear governance and communication.

Skills

Risk management

Cybersecurity assurance

Regulatory engagement

Board reporting

Regulatory communications

Education

Bachelor’s degree in Computer Science/IT/Cybersecurity

Professional certifications (CISA/CISM/CISSP/CRISC)

Job description

HKT is seeking a senior risk management professional to lead technology, cybersecurity and operational risk oversight for digital payment services, including fiat and cryptocurrency, and insurance-related businesses. The role aligns with HKMA and IA expectations and partners with senior management and the Board.

The position requires 10+ years in regulated financial services risk, hands-on HKMA framework knowledge, and strong blockchain security experience.