Senior Technical Manager, IT Risk and Controls

Global Sports Jobs Limited; Hong Kong; On-site; HKD 1,500,000 - 2,100,000; Full time

Benefits offered by this job

Competitive salary

Dynamic working environment

Development opportunities

Job summary

Global Sports Jobs Limited is seeking a Senior Technical Manager, IT Risk & Controls to lead how technology risk is assessed, interpreted and governed across the IT Division. The role partners with engineering, operations, data and security teams to enable innovation while maintaining performance and resilience, and to evolve the IT risk methodology into a living system aligned with modern delivery models.

You will mentor junior risk practitioners and influence senior leaders to adopt practical

Qualifications

• 10+ years in technology or operational risk management.
• Proven track record designing, evolving and leading technology risk frameworks and control assessment programmes.
• Strong control assessment methodology background with a drive to modernise approaches.
• Experience influencing outcomes in complex, matrixed environments.
• Deep understanding of technology risk, control design and operational resilience.
• Familiarity with enterprise architecture, service management, asset management, change management and system migrations.
• Knowledge of IT standards, governance, risk and internal control.
• Experience with GRC tooling and risk dashboards as insight platforms.

Responsibilities

• Lead evolution of technology risk practices across the IT Division for cloud, Agile and modern delivery models.
• Guide teams toward outcome-focused, risk-driven controls that scale with change.
• Refine the Technology Control Library to map to real risks and business impact.
• Design and maintain KRIs that surface early warning signals for management.
• Develop IT risk posture dashboards translating vulnerabilities into business actions.
• Analyze control weaknesses from incidents and changes to drive improvements.
• Act as trusted advisor to senior IT leaders and support governance forums.
• Mentor and develop junior risk practitioners in the IT Risk & Controls function.

Skills

Technology risk management

Risk framework design

Operational resilience

GRC tooling

Stakeholder influence

Leadership

Education

Bachelor's degree in a relevant discipline

Tools

GRC tooling

Risk dashboards

Job description

About the Role

The Senior Technical Manager, IT Risk & Controls leads how technology risk is assessed, interpreted and governed across the IT Division, acting as a first-line risk leader rather than in a traditional compliance capacity. The role sits within the IT Risk & Controls Department, whose objective is to maintain a robust risk management methodology that identifies, assesses and mitigates risks related to IT processes and technology. The postholder partners closely with engineering, operations, data and security teams to enable innovation while maintaining performance, resilience, control and accountability, and evolves the IT Risk Management Methodology into a living system reflecting modern delivery models, emerging technologies and real operational signals. The role also involves challenging legacy assumptions and helping senior leaders treat risk management as an enabler of better decisions.

Key Responsibilities

• Lead the evolution of technology risk practices across the IT Division, ensuring risk and control assessments remain relevant for cloud and platform-based architectures, Agile, DevSecOps and product-centric delivery models, and cyber, data, digital resilience and emerging technology risks.
• Guide teams away from static, checkbox-based controls towards outcome-focused, risk-driven practices that scale with change.
• Manage and continuously refine the Technology Control Library so that controls map to real risks and business impact, are proportionate and fit for modern environments, and enable technology teams to deliver at pace.
• Design and maintain Key Risk Indicators that go beyond lagging compliance measures, drawing on operational and technical data to surface early warning signals for management.
• Develop IT risk posture dashboards that highlight trends, trade-offs and decision points, translating technical vulnerabilities into business outcomes and choices, and helping management understand what needs to change and why.
• Analyse control weaknesses and contributing factors arising from incidents, near misses and operational disruptions.
• Identify systemic themes across incidents and changes, and drive targeted control and design improvements that prevent recurrence.
• Act as a trusted advisor to senior IT leaders, using influence and credibility rather than authority, and support governance forums.
• Guide teams through complex risk decisions in high-pressure delivery environments.
• Mentor and develop junior risk practitioners, growing the overall capability of the IT Risk and Control function.

Required Experience & Qualifications

• 10+ years in technology or operational risk management.
• Proven track record designing, evolving and leading technology risk frameworks and control assessment programmes.
• Strong control assessment methodology background with a drive to modernise approaches.
• Experience influencing outcomes in complex, matrixed environments.
• Deep expertise in building and running operational risk management functions within IT organisations.
• Deep understanding of technology risk, control design and operational resilience.
• Familiarity with enterprise architecture, service management, asset management, change management and system migrations.
• Knowledge of industry best practices and trends in IT standards, governance, risk and internal control.
• Experience with GRC tooling and risk dashboards, viewed as insight platforms rather than repositories.
• Capable of assessing and quantifying technology and operational risks, evaluating mitigation measures and providing practical recommendations.
• Technically astute with excellent analytical and decision-making ability.
• Able to understand the Club's unique nature, culture, business strategies and priorities as they relate to risk management.
• Excellent written and verbal communication skills in English, including report writing.
• Strong leadership with effective people and relationship management skills.
• High influencing skills with the ability to engage stakeholders at all levels.

Preferred Skills

• Bachelor's degree in a relevant discipline, such as operational risk management, information security or IT risk management.
• Professional risk management certification such as ISO 31000, CISA or CRISC, and/or industry body affiliation.
• Comfort navigating discussions about architecture and system dependencies.
• Comfort navigating discussions about change and release risk in Agile environments.
• Comfort navigating discussions about data governance, privacy and ethical use of technology.
• Comfort navigating discussions about cyber and operational resilience trade-offs.
• A curious, strategic and pragmatic outlook, able to turn complexity into clarity and uncertainty into informed action.

Benefits & Perks

• Competitive salary and benefits package.
• A dynamic working environment.
• Development opportunities.