Senior Technical Manager, Technology Risk & Governance

ConnectedGroup Limited; Hong Kong; On-site; HKD 1,200,000 - 2,100,000; Full time

Job summary

ConnectedGroup Limited is seeking a Senior Technical Manager, Technology Risk & Governance to lead the evolution of its technology risk and control framework within a complex, technology-driven enterprise. You will shape modern risk practices across cloud, DevSecOps, and emerging tech, delivering governance while enabling innovation and resilience.

You will partner with senior technology and business leaders, translating technical risk into business insights and advising executives.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Risk Management, Business Administration, or related field.
• CISA, CRISC, CISSP, CGEIT, ISO 31000 or equivalent certifications are highly regarded.
• Minimum 10 years' experience in Technology Risk, IT Governance, Operational Risk, Information Security, Internal Audit, or related disciplines.
• Proven track record leading technology risk management frameworks, and governance initiatives within large, complex organizations.
• Experience influencing senior stakeholders across matrixed business and technology environments.
• Strong exposure to digital transformation, cloud adoption, and modern software delivery practices.
• Deep understanding of Technology Risk Management and Governance, Information Security, Cloud/Hybrid tech, Enterprise Architecture, ITSM, and Data Governance.
• Experience with Governance, Risk & Compliance (GRC) platforms, risk tooling, and management reporting solutions.
• Outstanding stakeholder management and analytical, strategic thinking skills.

Responsibilities

• Lead the development and enhancement of enterprise-wide technology risk, control, and governance frameworks.
• Embed risk management across cloud, Agile, DevSecOps, and emerging tech environments.
• Partner with technology leaders to integrate risk considerations into strategy, delivery, and operations.
• Oversee technology control frameworks, risk assessments, and remediation activities.
• Develop and monitor KRIs, dashboards, and reporting for senior management.
• Analyze technology incidents and control failures to drive resilience improvements.
• Act as trusted advisor to senior stakeholders on complex risk matters.
• Mentor risk professionals and foster a risk-aware culture across the organization.

Skills

Stakeholder management

Technology risk management

IT governance

Cloud & hybrid environments

GRC tooling

Executive communication

Education

Bachelor's degree in IT/InfoSec/Risk

Tools

GRC platforms

Job description

Senior Technical Manager, Technology Risk & Governance

Our client, a leading enterprise with a highly complex and technology-driven operating environment, is seeking a Senior Technical Manager, Technology Risk and Governance to lead the evolution of its technology risk and control framework.

This is a strategic role that sits at the intersection of technology, risk, governance, and business transformation. The successful candidate will be responsible for shaping and embedding modern technology risk management practices across a diverse technology landscape, ensuring risks are proactively identified, assessed, monitored, and managed while enabling innovation, operational resilience, and business growth.

Working closely with senior technology and business leaders, you will serve as a trusted advisor, translating complex technical and operational risks into meaningful business insights and driving informed decision-making at both operational and executive levels. This role requires a forward-thinking risk leader who can balance strong governance with agility, helping the organization navigate an evolving technology and threat landscape.

Responsibilities of the Role

• Lead the development and enhancement of enterprise-wide technology risk, control, and governance frameworks.
• Embed risk management practices across cloud, Agile, DevSecOps, and emerging technology environments.
• Partner with technology leaders to integrate risk considerations into strategy, delivery, and operations.
• Oversee technology control frameworks, risk assessments, and remediation activities to strengthen control effectiveness.
• Develop and monitor Key Risk Indicators (KRIs), dashboards, and reporting to provide meaningful risk insights to senior management.
• Analyze technology incidents and control failures, driving continuous improvement and operational resilience initiatives.
• Act as a trusted advisor to senior stakeholders, providing guidance on complex technology risk and governance matters.
• Mentor and develop risk professionals while fostering a strong risk-aware culture across the organization.

Required Skills & Experience

• Bachelor's degree in Information Technology, Information Security, Risk Management, Business Administration, or a related discipline.
• Professional certifications such as CISA, CRISC, CISSP, CGEIT, ISO 31000, or equivalent are highly regarded.
• Minimum 10 years' experience in Technology Risk, IT Governance, Operational Risk, Information Security, Internal Audit, or related disciplines.
• Proven track record leading technology risk management frameworks, control assessment programs, and governance initiatives within large and complex organizations.
• Experience influencing senior stakeholders and driving outcomes across matrixed business and technology environments.
• Strong exposure to digital transformation, cloud adoption, enterprise technology operations, and modern software delivery practices.
• Deep understanding of:
• Technology Risk Management and Governance
• Operational Risk and Internal Control Frameworks
• Information Security and Cyber Risk
• Cloud and Hybrid Technology Environments
• Enterprise Architecture and Infrastructure Services
• IT Service Management (ITSM)
• Change, Release, and Incident Management
• Data Governance, Privacy, and Regulatory Risk
• Business Continuity and Operational Resilience
• Experience with Governance, Risk & Compliance (GRC) platforms, technology risk tooling, and management reporting solutions.
• Outstanding stakeholder management, influencing, and relationship-building skills.
• Strong commercial acumen with the ability to balance risk management against operational and business objectives.
• Exceptional analytical, strategic thinking, and problem-solving capabilities.
• Ability to distill complex technical concepts into executive-level insights and recommendations.
• Excellent written and verbal communication skills with experience presenting to executive leadership and governance committees.