Your new company

Our client is a well-established enterprise organization with a sizeable technology environment across business-critical platforms, infrastructure, cloud services and digital applications. As part of its continued focus on cybersecurity, technology risk management, governance and regulatory compliance, they are looking for an experienced Cybersecurity Risk & Governance Manager for their Cybersecurity Team to strengthen their IT governance framework and ensure technology risks are effectively managed across the organization.

Your new role

• Involve in leading the organization's cybersecurity and IT governance programmes, ensuring alignment with business and regulatory requirements.
• Drive enterprise-wide IT risk assessments, control reviews and risk mitigation initiatives.
• Design, maintain and enhance cybersecurity, technology risk and governance frameworks, policies, standards and procedures.
• Manage technology risk registers, risk reporting and governance committees, providing insight to senior management.
• Coordinate internal and external audits, regulatory reviews and compliance assessments.
• Monitor emerging technology, cybersecurity and regulatory risks and recommend appropriate controls and governance measures.
• Partner with data, infrastructure, application development, and digital teams to ensure governance requirements are embedded within technology initiatives.
• Oversee third-party risk assessments, vendor compliance reviews and security due diligence activities.
• Develop governance dashboards, risk metrics and executive reporting for management and board-level stakeholders.
• Promote risk awareness and governance best practices across technology and business functions.

What you'll need to succeed

• Bachelor's degree in Information Technology, Computer Science or related disciplines.
• 5+ years of experience within IT Risk, Cybersecurity, IT Governance, or related areas.
• Strong understanding of enterprise/group level risk management, IT governance and compliance frameworks.
• Hands-on experience with any of the frameworks such as ISO 27001, NIST CSF, ITIL or similar governance standards.
• Familiarity with regulatory and compliance requirements within highly regulated environments.
• Experience managing risk assessments, control testing and remediation programmes.
• Strong stakeholder management skills with the ability to engage both technical and non-technical audiences.
• Professional certifications such as, CISSP, CISM, CISA or equivalent would be advantageous.
• Proficient in English and Chinese (Cantonese and/or Mandarin) and currently based in Hong Kong with a valid work permit.

What you need to do now
If you're interested in this exciting opportunity, please don't delay and click APPLY NOW. For more information, please contact Kelvin Chu at kelvin.chu@hays.com.hk.