Technology Risk Associate: Cybersecurity & Compliance

EY; Hong Kong; On-site; HKD 480,000 - 760,000; Full time

Benefits offered by this job

Supportive team and coaching

Career development and progression

Flexible working arrangements

Job summary

EYHong Kong is seeking a Staff/Senior Associate in Technology Risk within the Financial Services Risk Consulting team. You will guide clients on technology risk, regulatory compliance, licensing and governance, while strengthening cybersecurity postures and business resilience.

You will work with an international team to identify and manage risks, deliver advisory services, and contribute to project management and client engagements. Fluency in English and Chinese is preferred.

Qualifications

• Bachelor's degree or master's in Information Security, Computer Science, Engineering or related field.
• 2–5 years of relevant experience with hands-on risk and security work.
• Certifications such as CISA, CISM or CISSP preferred; CRTP/CRTE/OSCP/GXPN/GNPS encouraged.

Responsibilities

• Conduct technology compliance reviews for banking, wealth, asset management and insurance segments.
• Analyze IT environments, identify risks, and evaluate controls including cloud security aspects.
• Assist clients with regulatory controls, governance, and incident response frameworks.
• Provide licensing guidance to support regulatory activities and approvals.
• Develop security strategies aligned with business needs and risk appetite.
• Deliver training and contribute to client engagements and proposals.

Skills

Regulatory knowledge

Information security

Governance & risk

Communication

Education

Bachelor's or Master's in Information Security / CS / Engineering

Tools

SQL

Python

Job description

EYHong Kong is seeking a Staff/Senior Associate in Technology Risk within the Financial Services Risk Consulting team. You will guide clients on technology risk, regulatory compliance, licensing and governance, while strengthening cybersecurity postures and business resilience.

You will work with an international team to identify and manage risks, deliver advisory services, and contribute to project management and client engagements. Fluency in English and Chinese is preferred.