Technology Risk & IT Assurance Advisor (Hong Kong)

EY; Hong Kong; On-site; HKD 600,000 - 1,200,000; Full time

Job summary

EY Hong Kong seeks a technology risk specialist to guide clients in managing technology risks and regulatory compliance, strengthening cybersecurity postures, and supporting business resilience. The role sits in an international team delivering information security solutions for the financial sector.

You will conduct risk assessments, implement security controls, and mentor junior team members while staying current with privacy laws and security trends.

Qualifications

• Bachelor’s or master’s degree in Information Security, IT management, or related fields.
• Relevant hands-on experience in technology risk and cybersecurity for financial services.
• Certifications: CISA, CISM, CISSP.
• Technical certifications: CRTP, CRTE, OSCP, GPEN, GXPN and cloud-related credentials.
• Strong English and Chinese; Mandarin is an advantage.
• Proficiency with MS Office and Chinese processing.
• Familiarity with ISO, NIST, COBIT, SANS.

Responsibilities

• Conduct technology compliance reviews for banks, asset management and insurance sectors.
• Analyze client IT environments, identify risks and evaluate controls including cloud security.
• Advise clients on achieving compliance and controls per regulators.
• Act as licensing advisor for technology risk perspective in financial activity licensing journeys.
• Develop and review information security frameworks (ISO, NIST, COBIT, SANS).
• Help clients build governance and incident response processes for cyber events.

Skills

Regulatory compliance

Cybersecurity risk assessment

Project management

Mentoring/leadership

Education

Bachelor’s or Master’s degree in Information Security/IT management

Tools

CRTP

CRTE

OSCP

GPEN

GXPN

Job description

EY Hong Kong seeks a technology risk specialist to guide clients in managing technology risks and regulatory compliance, strengthening cybersecurity postures, and supporting business resilience. The role sits in an international team delivering information security solutions for the financial sector.

You will conduct risk assessments, implement security controls, and mentor junior team members while staying current with privacy laws and security trends.