Vendor Security Risk & GRC Coordinator

Talent Pro Recruitment Company Limited; Hong Kong; On-site; HKD 350,000 - 520,000; Full time

Job summary

Talent Pro Recruitment Company Limited is seeking an IT and technology risk assessment coordinator in Hong Kong to oversee third-party security risk management and GRC activities. The role focuses on evaluating vendor security, tracking risk remediation, and coordinating across business units and vendors.

The ideal candidate will have 1–3 years of information security or TPRM experience, with a degree in a related field, and strong analytical skills.

Qualifications

• 1–3 years of experience in information security, technology risk, third-party risk management (TPRM) or GRC
• Degree or Diploma in information security, cybersecurity, computer science, technology risk, or related field
• Strong analytical and evidence-driven mindset with hands-on experience reviewing security controls

Responsibilities

• Evaluate third-party vendor risks by reviewing security questionnaires, policies, certifications (e.g., ISO 27001), and assessment reports.
• Identify security gaps or control deficiencies, document residual risks, and follow up with stakeholders to ensure remediation.
• Liaise between business units, technical teams, and external vendors to clarify responses, obtain evidence, and close items.
• Maintain audit-ready records and prepare risk summaries and status reports for management.
• Support ongoing monitoring of high-risk vendors and contribute to refining assessment methodologies and governance workflows

Skills

Analytical thinking

Evidence-driven

Multi-tasking

Security controls review

Education

Information Security Degree

Cybersecurity Degree

Computer Science Degree

Technology Risk Degree

Job description

Talent Pro Recruitment Company Limited is seeking an IT and technology risk assessment coordinator in Hong Kong to oversee third-party security risk management and GRC activities. The role focuses on evaluating vendor security, tracking risk remediation, and coordinating across business units and vendors.

The ideal candidate will have 1–3 years of information security or TPRM experience, with a degree in a related field, and strong analytical skills.