Tech Risk & IT Security Assistant Manager

InfoTech Services (Hong Kong) Limited; Hong Kong; On-site; HKD 420,000 - 780,000; Full time

Job summary

InfoTech Services (Hong Kong) Limited invites a seasoned risk professional to join our financial institution-focused team. You will coordinate risk management processes, support enterprise risk frameworks, and work with IT, operations, and cyber security to identify controls and monitor risk posture.

The role requires at least 5 years in technology/operational risk management, familiarity with HK regulatory standards (HKMA CFI 2.0, ISO/IEC 27001), and professional certifications such as CISA or

Qualifications

• University degree preferably in computer science, information technology, information systems, business or related discipline.
• Minimum 5 years of experience in technology / operational risk management, information security or IT auditing.
• Knowledge of risk management frameworks and regulatory requirements (HKMA, ISO/IEC 27001).
• CISA, CISSP and/or other equivalents preferred.

Responsibilities

• Assist in coordination of risk management processes.
• Assist in development and implementation of enterprise risk management framework, strategies, policy and procedures.
• Coordinate with business units to establish a risk management process for IT, operations, and cyber security, including risk identification, control design and monitoring.

Skills

Risk management

Communication

Documentation

Teamwork

Education

University degree in IT or related field

Tools

HK regulatory standards

ISO/IEC 27001

CFI 2.0 (HKMA)

Job description

InfoTech Services (Hong Kong) Limited invites a seasoned risk professional to join our financial institution-focused team. You will coordinate risk management processes, support enterprise risk frameworks, and work with IT, operations, and cyber security to identify controls and monitor risk posture.

The role requires at least 5 years in technology/operational risk management, familiarity with HK regulatory standards (HKMA CFI 2.0, ISO/IEC 27001), and professional certifications such as CISA or