VP, Technology Risk & Controls

Hong Kong Exchanges and Clearing Limited (HKEX); Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

HKEX CTO Office and Process, Risk and Control oversees risk‑based testing and ensures control effectiveness across tech operations in a dynamic capital markets setting. The role focuses on design, testing, audit readiness, and remediation coordination for technology risks.

We seek a senior professional with 8–12+ years in IT risk, strong stakeholder management, and certifications such as CISA/CISSP/CISM. The position is based in Hong Kong and involves interaction with regulators and senior

Qualifications

• Bachelor’s or Master’s degree in computer science, IT, engineering, or related discipline.
• 8–12+ years in technology risk, IT risk assessment, information security, or control assurance.
• Experience with Line 1.5 risk and control function plus first‑line tech operations.
• Professional qualifications (e.g., CISA, CISSP, CISM) or equivalent preferred.
• Strong knowledge of IT general controls, application controls, cybersecurity, cloud, and SDLC.

Responsibilities

• Design, execute, and oversee risk‑based IT control testing across infrastructure, cybersecurity, cloud, and apps.
• Act as technology audit readiness lead, review evidence, narratives, and documentation for auditors/regulators.
• Lead IT risk and control self‑assessments; guide teams in risk identification and control design.
• Oversee incidents, breaches, and remediation; ensure timely root cause analysis and effective fixes.
• Develop KRIs/KPIs and deliver concise reporting to technology risk management committee.

Skills

Stakeholder management

Communication

Risk assessment

IT risk management

Education

Bachelor’s or Master’s in Computer Science / IT / Engineering

Tools

GRC tools

Job description

HKEX CTO Office and Process, Risk and Control oversees risk‑based testing and ensures control effectiveness across tech operations in a dynamic capital markets setting. The role focuses on design, testing, audit readiness, and remediation coordination for technology risks.

We seek a senior professional with 8–12+ years in IT risk, strong stakeholder management, and certifications such as CISA/CISSP/CISM. The position is based in Hong Kong and involves interaction with regulators and senior