Technology Risk & Compliance Advisor — AI Governance

Moore Stephens Hong Kong; Hong Kong; On-site; HKD 520,000 - 860,000; Full time

Benefits offered by this job

Competitive compensation

Job summary

Moore Stephens Hong Kong seeks an IT risk professional to lead engagements in technology risk, cybersecurity, and regulatory compliance (SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC). You will perform risk assessments, control reviews, and gap analyses across client environments.

Responsibilities include developing policies and governance frameworks, assisting in Privacy Impact Assessments, and advising on AI governance, with English client deliverables and opportunities to collaborate with

Qualifications

• Bachelor’s degree required in Information Security, Computer Science, or related discipline.
• Professional certification such as CISA, CISSP, or equivalent is mandatory.
• 3–6 years of relevant experience in IT audit, cybersecurity, or risk advisory.
• Solid understanding of ISO 27001, NIST, SOC 2, and privacy regulations (e.g., PDPO).
• Experience or interest in applying AI tools in audit, compliance, or advisory work.

Responsibilities

• Lead and support engagements in technology risk, cybersecurity, and regulatory compliance (e.g., SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC requirements).
• Perform risk assessments, control reviews, and gap analyses across client environments.
• Contribute to the development of policies, procedures, and governance frameworks.
• Assist in Privacy Impact Assessments (PIA) and AI governance advisory projects.

Skills

Analytical skills

Report writing

English communication

Multi-language advantage

Education

Bachelor’s degree in Information Security

Tools

Nessus

Burp Suite

Job description

Moore Stephens Hong Kong seeks an IT risk professional to lead engagements in technology risk, cybersecurity, and regulatory compliance (SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC). You will perform risk assessments, control reviews, and gap analyses across client environments.

Responsibilities include developing policies and governance frameworks, assisting in Privacy Impact Assessments, and advising on AI governance, with English client deliverables and opportunities to collaborate with