Senior Tech Risk & Cyber Resilience Lead

HKT; Hong Kong Island; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

HKT is seeking an Assistant Vice President for Technology and Operational Risk Management in Hong Kong. The role provides risk advisory and regulatory engagement across technology, cybersecurity, and virtual assets, supporting senior management and the Board.

You will oversee risk controls for digital payment platforms, APIs, cloud infrastructure, and cross-border processing while coordinating with HKMA and IA regulators on governance, resilience, and incident response.

Qualifications

• 10+ years in technology and operational risk management, cybersecurity advisory for regulated institutions.
• Hands-on experience with HKMA C-Raf and regulatory examinations.
• Knowledge of HKMA stablecoins and SFC VASP technology expectations.
• Blockchain/distributed ledger security expertise including wallet key management.
• Bachelor’s degree in CS/IT/Cybersecurity; professional certifications preferred.

Responsibilities

• Provide risk stewardship and oversight of technology, cybersecurity, and operational risk across platforms and payment systems.
• Review and challenge risk assessments, resilience, and control effectiveness with stakeholders.
• Advise on changes, control design, implementation, and customer servicing.
• Act as risk SME on HKMA C-RAF requirements for the licensee.
• Oversee risk in virtual assets, blockchain payment security, and cross-border processing.
• Engage with HKMA and IA regulators, ensuring governance and reporting to senior management.

Skills

Technology risk management

Cybersecurity assurance

Regulatory engagement

Blockchain security

Education

Bachelor’s degree in Computer Science/Information Technology/Cybersecurity

CISA/CISM/CISSP/CRISC preferred

Tools

HKMA C-Raf

SFC VASP guidance

Job description

HKT is seeking an Assistant Vice President for Technology and Operational Risk Management in Hong Kong. The role provides risk advisory and regulatory engagement across technology, cybersecurity, and virtual assets, supporting senior management and the Board.

You will oversee risk controls for digital payment platforms, APIs, cloud infrastructure, and cross-border processing while coordinating with HKMA and IA regulators on governance, resilience, and incident response.