Vice President – Technology Risk & IT Governance

All Star Agency; Hong Kong; On-site; HKD 1,500,000 - 2,100,000; Full time

Job summary

Leading International Bank in Hong Kong seeks a Vice President – Technology Risk & IT Governance to support non-cyber technology risk governance, regulatory assessments, and remediation tracking for the Hong Kong Branch.

The role requires extensive IT risk or IT audit experience, strong control mindset, and ability to coordinate with IT, business and control functions. Cantonese/Mandarin advantageous for stakeholder communication.

Qualifications

• University degree in IT, risk, audit, or compliance.
• CISA, CRISC, CISSP or similar certification is an advantage.
• 10+ years in IT risk, technology compliance, or related governance.
• Experience in banking or regulated financial institutions preferred.
• Strong communication with technical and non-technical stakeholders.

Responsibilities

• Support IT risk governance activities for the Branch on non-cyber tech risk and compliance.
• Coordinate regulatory, compliance and control assessments and audits.
• Maintain risk registers, issue logs, action trackers and remediation status.
• Prepare periodic risk, control, KPI and KRI reports for management.
• Support governance reviews of incidents and control issues and update governance docs.
• Suggest improvements to risk and control processes to enhance reporting.

Skills

IT risk management

IT governance

Audit coordination

Regulatory reporting

Stakeholder communication

English proficiency

Education

University degree in Information Technology, Risk Management, Audit, Compliance or related discipline

Job description

Join a leading international bank in Hong Kong as Vice President – Technology Risk & IT Governance. You will support IT risk governance for the Hong Kong Branch, with a focus on non-cyber technology risk, regulatory assessments, audit coordination and remediation tracking.

About the Role

This role suits an experienced technology risk or IT audit professional with a strong control mindset and good coordination skills. You will work closely with IT, business and control functions to maintain an effective technology risk and compliance framework, keep risk and issue records accurate, and prepare clear reporting for management.

Key Responsibilities

• Support IT risk governance activities for the Branch, focusing on non-cyber technology risk and compliance matters.
• Coordinate regulatory, compliance and control-related assessments, and support internal, external and regulatory audits, including evidence collection and follow-up.
• Maintain risk registers, issue logs, action trackers and remediation status reports, and work with stakeholders to close findings on time.
• Prepare periodic risk, control, KPI and KRI reports for management review.
• Support governance reviews of technology incidents and control issues, and help maintain policies, procedures and governance documentation.
• Review and recommend improvements to technology risk and control processes to strengthen control effectiveness and reporting quality.

Requirements

• University degree in Information Technology, Risk Management, Audit, Compliance or a related discipline. CISA, CRISC, CISSP or similar certification is an advantage.
• At least 10 years of experience in IT risk, technology compliance, technology audit, internal control or related governance functions, preferably in banking or a regulated financial institution.
• Good understanding of technology risk, compliance processes, audit coordination and remediation tracking, with hands-on experience in risk registers, issue tracking and KPI/KRI reporting.
• Familiarity with outsourcing risk, cloud-related risk, third-party risk and operational controls is an advantage.
• Strong attention to detail, analytical and problem-solving skills, and the ability to communicate clearly with technical and non-technical stakeholders.
• Good written and spoken English. Cantonese, Mandarin or Japanese is an advantage.