Assistant Manager in Risk Governance
About the job
Job Duties
Operate and maintain Group-wide security governance frameworks, policies, standards, and procedures across IT, OT, and business environments.
Provide clear, practical guidance on security obligations, risk exposure, and required mitigation measures to business units and project teams.
Prepare governance reports, dashboards, KPIs, and KRIs, while tracking corrective actions for management and governance committees.
Coordinate evidence, responses, and remediation activities for internal/external audits, maturity assessments, and regulatory reviews.
Monitor industry and regulatory developments to drive continuous improvements in control effectiveness, reporting quality, and governance processes.
Foster security governance awareness, capability, and consistent policy ownership across diverse operational environments.
Requirements and Qualifications
University degree holder in Information Technology, Computer Science, Information Security, Cybersecurity, or a related discipline.
Minimum 3 years of experience in security governance, risk management, compliance, or audit.
Hands-on experience supporting risk assessments, governance reporting, and audit/assurance reviews.
Professional certification in security, risk, governance, or audit (e.g., CRISC, CISM, CISA, CISSP, or equivalent).
Full fluency in written and spoken English and Cantonese.
Excellent communication skills, with the ability to translate complex risk concepts to both technical and non-technical stakeholders.
- Sound knowledge in Cybersecurity and AI Governance would be an advantage.
