Back to search

Technology Risk / GRC Specialist (PERM)

IO Tech Solutions Hong Kong
Full time Permanent On-site Basic Salary + discretionary bonus

About the job

Key Responsibilities:

Security Governance

  1. Develop, implement, and maintain cybersecurity policies, standards, and procedures aligned with industrial best practices and regulatory requirements.
  2. Prepare reports and dashboards for senior management on risk posture, compliance status, and audit findings.
  3. Arrange and deliver training on cyber and information security topics to stakeholders.

Risk Oversight & Assessment

  1. Own the central risk registry, ensuring all identified vulnerabilities and treatment action plans are actively tracked and updated.
  2. Perform periodic risk evaluations and control testing to uncover system gaps, providing actionable, prioritized mitigation roadmaps.
  3. Keep a pulse on the evolving threat landscape, new regulatory updates, and shifting sector trends to proactively adjust defense strategies.

Audit & Compliance Management

  1. Orchestrate end-to-end coordination for internal and external audits across multiple regulatory mandates (including PCI-DSS and ISO 27001).
  2. Oversee ongoing compliance health checks, monitoring remediation efforts and liaising with various stakeholders to close out findings promptly.
  3. Gather and organize audit evidence, conduct root-cause gap analysis, and ensure corrective measures are implemented on schedule.
  4. Partner seamlessly with cross-functional technology and business teams to weave security controls into daily operations and project rollouts.

What We Are Looking For:

  1. Education: Bachelor's degree in Cybersecurity, IT, Risk, Computer Science, or a related discipline.
  2. Experience: 1 to 3 years of practical experience in security governance, IT audit, compliance, or risk management.
  3. Technical Know-How: Solid grasp of established security frameworks (specifically PCI-DSS and ISO 27001); familiarity with modern security tooling such as vulnerability scanners, XDR platforms, and SIEM solutions is a plus.
  4. Soft Skills: Exceptional problem-solving capabilities, strong written/verbal communication, and meticulous attention to detail.
  5. Organizational Fit: Comfortable juggling multiple concurrent projects, prioritizing competing demands, and operating autonomously while remaining a strong cross-functional collaborator.
  6. Certifications (Nice-to-Have): Credentials like CISSP, CISM, CISA, CRISC, CGRC, or SSCP will give you a distinct advantage.