Cybersecurity Risk Manager

Responsibilities

• Advance the Cyberecurity Risk Management framework by conducting comprehensive cyber risk evaluations, refining mitigation strategies, and developing a structured risk management system.
• Harmonize organizational risk tolerance and optimize business procedures accordingly.
• Implement core risk management elements, including risk libraries, impact criteria, governance protocols, control validations, issue tracking, registries, and reporting mechanisms.
• Evaluate risks against policies, standards, compliance mandates, and industry benchmarks for IT and business initiatives, while enforcing effective security controls for risk reduction.

Skills Reqd

• Bachelor's degree in Computer Science, IT, Cybersecurity, Information Security Management, or equivalent discipline.
• Minimum 8 years in hands-on IT technical and audit roles, including at least 3 years directly in technology risk evaluation and security compliance.
• Preferred strong advisory experience in IT audit, security consulting, or related fields.
• Relevant certifications such as CISA, CISSP, CRISC, or comparable credentials highly desirable, plus familiarity with risk-based audit engagement and assessment execution, and ability to deliver targeted risk insights to technical and business audiences.
• Proficient in Cantonese & English