Technology Risk & Compliance

Moore Stephens Hong Kong; Hong Kong; On-site; HKD 520,000 - 860,000; Full time

Benefits offered by this job

Competitive compensation

Job summary

Moore Stephens Hong Kong seeks an IT risk professional to lead engagements in technology risk, cybersecurity, and regulatory compliance (SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC). You will perform risk assessments, control reviews, and gap analyses across client environments.

Responsibilities include developing policies and governance frameworks, assisting in Privacy Impact Assessments, and advising on AI governance, with English client deliverables and opportunities to collaborate with

Qualifications

• Bachelor’s degree required in Information Security, Computer Science, or related discipline.
• Professional certification such as CISA, CISSP, or equivalent is mandatory.
• 3–6 years of relevant experience in IT audit, cybersecurity, or risk advisory.
• Solid understanding of ISO 27001, NIST, SOC 2, and privacy regulations (e.g., PDPO).
• Experience or interest in applying AI tools in audit, compliance, or advisory work.

Responsibilities

• Lead and support engagements in technology risk, cybersecurity, and regulatory compliance (e.g., SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC requirements).
• Perform risk assessments, control reviews, and gap analyses across client environments.
• Contribute to the development of policies, procedures, and governance frameworks.
• Assist in Privacy Impact Assessments (PIA) and AI governance advisory projects.

Skills

Analytical skills

Report writing

English communication

Multi-language advantage

Education

Bachelor’s degree in Information Security

Tools

Nessus

Burp Suite

Job description

Key Responsibilities

• Lead and support engagements in technology risk, cybersecurity, and regulatory compliance (e.g., SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC requirements).
• Perform risk assessments, control reviews, and gap analyses across client environments.
• Contribute to the development of policies, procedures, and governance frameworks.
• Assist in Privacy Impact Assessments (PIA) and AI governance advisory projects.
• Utilize AI tools to enhance report drafting, data analysis, and audit efficiency.
• Prepare high-quality client deliverables, including reports, presentations, and recommendations.
• Engage with clients and stakeholders to communicate findings and remediation strategies.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related discipline.
• Professional certification such as CISA, CISSP, or equivalent (mandatory).
• 3–6 years of relevant experience in IT audit, cybersecurity, or risk advisory.
• Solid understanding of frameworks and standards such as ISO 27001, NIST, SOC 2, and privacy regulations (e.g., PDPO).
• Experience or strong interest in applying AI tools (e.g., generative AI, automation tools) in audit, compliance, or advisory work.
• Strong analytical, documentation, and report-writing skills.
• Excellent communication skills in English; Cantonese/Mandarin is an advantage.

Preferred Attributes

• Experience in financial services, insurance, or technology sectors.
• Exposure to AI governance, model risk management, or emerging technology risks.
• Familiarity with security testing tools (e.g., Nessus, Burp Suite) is a plus.
• Proactive mindset with the ability to manage multiple engagements.

What We Offer

• Exposure to high-impact advisory projects across industries.
• Opportunities to work on emerging areas such as AI governance and regulatory technology.
• Collaborative and growth-oriented environment.
• Competitive compensation and career development opportunities.

Competitive package will be offered to the right candidate(s), including 5-day work week, birthday leave & medical insurance coverage.