VP Cyber Risk, AI & Resilience Lead

Hong Kong Exchanges and Clearing Limited (HKEX); Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

HKEX is seeking an independent second-line overseer of cyber, AI and data risks to provide risk assessments, lead red-team testing and report material risks to senior management and governance committees.

Based in Hong Kong, you will monitor risk indicators, challenge defence-in-depth across IT domains, and coordinate crisis simulations to ensure regulatory readiness and resilient operations.

Responsibilities

• Identify, assess and monitor material cyber, data and AI risks; provide independent advice and constructive challenge to ITD and other first-line owners, and scale significant exposures with recommendations for mitigation and remediation.
• Monitor, develop and report key cyber risk and performance indicators, escalating trends and providing risk insights where appropriate
• Coordinate and oversee risk-based external threat led red-team and adversarial security testing; challenge scope, scenarios, coverage, independence, findings and residual risk.
• Assess and challenge ITD’s defence-in-depth approach across identity, network, endpoint, application, data, cloud, third-party and recovery controls, including attack paths, dependencies, monitoring, containment and potential single points of failure, including thematic risk assessments of key risk areas and control initiatives
• Develop and coordinate cyber tabletop and crisis-simulation activities that test decision-making, escalation, regulatory notification, communications, recovery and dependencies; capture lessons and monitor material follow-up actions.
• Provide independent insight supporting responsible AI governance, assess cybersecurity, data, model, third-party, human-oversight and resilience risks, and monitor emerging AI-enabled threats.
• Support the Group’s data governance and data risk management journey by advising on data confidentiality, integrity, availability, classification, access, lineage, quality, retention, sharing and resilience.
• Review incidents, threat intelligence, vulnerabilities, testing and regulatory developments; initiate thematic reviews, translate technical issues into business and resilience implications, report to senior management and governance committees, and lead significant workstreams and stakeholder engagement.

Job description

HKEX is seeking an independent second-line overseer of cyber, AI and data risks to provide risk assessments, lead red-team testing and report material risks to senior management and governance committees.

Based in Hong Kong, you will monitor risk indicators, challenge defence-in-depth across IT domains, and coordinate crisis simulations to ensure regulatory readiness and resilient operations.