Assistant Manager in Risk Governance

Job Duties

• Operate and maintain Group-wide security governance frameworks, policies, standards, and procedures across IT, OT, and business environments.

• Provide clear, practical guidance on security obligations, risk exposure, and required mitigation measures to business units and project teams.

• Prepare governance reports, dashboards, KPIs, and KRIs, while tracking corrective actions for management and governance committees.

• Coordinate evidence, responses, and remediation activities for internal/external audits, maturity assessments, and regulatory reviews.

• Monitor industry and regulatory developments to drive continuous improvements in control effectiveness, reporting quality, and governance processes.

• Foster security governance awareness, capability, and consistent policy ownership across diverse operational environments.

Requirements and Qualifications

• University degree holder in Information Technology, Computer Science, Information Security, Cybersecurity, or a related discipline.

• Minimum 3 years of experience in security governance, risk management, compliance, or audit.

• Hands-on experience supporting risk assessments, governance reporting, and audit/assurance reviews.

• Professional certification in security, risk, governance, or audit (e.g., CRISC, CISM, CISA, CISSP, or equivalent).

• Full fluency in written and spoken English and Cantonese.

• Excellent communication skills, with the ability to translate complex risk concepts to both technical and non-technical stakeholders.

• Sound knowledge in Cybersecurity and AI Governance would be an advantage.