Senior Technical Manager, Cyber Risk Assessment and Analysis

Senior Technical Manager, Cyber Risk Assessment and Analysis Salary: Competitive and based on experience. Location: Hong Kong. Your day-to-day activities will involve collaborating with various departments to identify vulnerabilities, develop mitigation strategies, and ensure adherence to rigorous security standards. You will play an instrumental role in enhancing existing frameworks by conducting thorough assessments tailored to both IT infrastructure and business operations. What you'll do: Take ownership of critical cyber risk assessment initiatives that shape organisational security strategy and governance, ensuring alignment with global standards and regulatory requirements. Support and drive directives from Cybersecurity management by prioritising key initiatives that enhance organisational resilience against emerging threats. Contribute significantly to the continuous improvement of the Cybersecurity Risk Management (CSRM) programme by executing targeted risk assessments and refining existing frameworks. Align risk appetite with business objectives by fine-tuning processes and ensuring seamless integration of risk management practices within operational workflows. Follow established risk management protocols using tools such as Risks & Controls Library, Impact Thresholds, Security Governance structures, Controls Testing procedures, Issue Management systems, Risk Registers, and comprehensive Risk Reporting mechanisms. Assess risks for IT and business projects based on internal policies, international standards, technology compliance requirements, and industry best practices. Ensure that security measures are effectively adopted throughout the organisation to mitigate identified risks while maintaining compliance with relevant regulations. Oversee governance of risk exceptions and acceptance processes by validating them in a timely manner and escalating issues appropriately when necessary. Prepare detailed reports for senior management that clearly communicate the current security posture and highlight areas requiring attention or improvement. Partner with Information Security and IT teams to design and implement appropriate solutions that address vulnerabilities and reduce exposure to cyber threats. Actively participate in fostering a diverse and inclusive culture by supporting cross-team efforts, modelling collaborative behaviours, and promoting knowledge sharing. What you bring: A university degree in Computer Science, Information Technology/Security Management, Cybersecurity or a related discipline is essential for this position. Extensive experience working within technology risk management environments is required to navigate complex challenges effectively. A strong consulting background in IT/Security or IT Audit is highly desirable for providing expert guidance across multiple domains. At least eight years' experience in IT technical roles combined with three years' hands‑on involvement in technology risk assessment and security compliance is expected. Professional certifications such as CISA, CISSP, CRISC or equivalent are preferable for demonstrating advanced competency in information security. Proven ability to adopt risk-based assessment methodologies while engaging constructively with audit counterparts is important for success. Demonstrated experience performing comprehensive risk assessments and evaluations across diverse technological landscapes is vital. Expertise in reporting risks tailored specifically for both IT specialists and business stakeholders ensures clear communication of critical issues. Competency interacting with seasoned colleagues on topics including Technology Risk, Audit agendas, Cybersecurity Risk Management, Control Compliance is crucial. Experience building awareness among staff through support initiatives or training programmes contributes positively to organisational resilience. What sets this company apart: This organisation stands out as one of Hong Kong's most prominent employers renowned for its unwavering commitment to excellence in both operational performance and employee wellbeing. It celebrates diversity, invests heavily in professional development, offers flexible working arrangements, and fosters a supportive leadership culture. What's next: If you are ready to take your career in cyber risk management to new heights within an inclusive environment where your expertise truly makes a difference, this is your moment Apply today by clicking on the link provided – your next rewarding challenge awaits. #J-18808-Ljbffr