Assistant Manager in Risk Governance
Morgan McKinley
Hong Kong
Full time
Contract
On-site
HK$51k -60k pm
About the job
Job Duties
- Operate and maintain Group-wide security governance frameworks, policies, standards, and procedures across IT, OT, and business environments .
- Provide clear, practical guidance on security obligations, risk exposure, and required mitigation measures to business units and project teams .
- Prepare governance reports, dashboards, KPIs, and KRIs, while tracking corrective actions for management and governance committees .
- Coordinate evidence, responses, and remediation activities for internal/external audits, maturity assessments, and regulatory reviews .
- Monitor industry and regulatory developments to drive continuous improvements in control effectiveness, reporting quality, and governance processes .
- Foster security governance awareness, capability, and consistent policy ownership across diverse operational environments .
- University degree holder in Information Technology, Computer Science, Information Security, Cybersecurity, or a related discipline .
- Minimum 3 years of experience in security governance, risk management, compliance, or audit .
- Hands-on experience supporting risk assessments, governance reporting, and audit/assurance reviews .
- Professional certification in security, risk, governance, or audit (e.g., CRISC, CISM, CISA, CISSP, or equivalent) .
- Full fluency in written and spoken English and Cantonese .
- Excellent communication skills, with the ability to translate complex risk concepts to both technical and non-technical stakeholders .
- Sound knowledge in Cybersecurity and AI Governance would be an advantage.