Job Duties:

Governance & Regulatory Compliance

• Maintain the technology risk management framework in compliance with local insurance guidelines (e.g., HKIA, MAS, APRA) and international standards (ISO 27001, NIST).
• Prepare technology risk reports, dashboards, and regulatory filings for executive leadership and regulatory bodies.

 Cybersecurity & Incident Oversight

• Oversee vulnerability assessments, penetration testing, and code reviews across core insurance applications, cloud systems, and portals.
• Lead cyber incident response plans, ransomware readiness, and root-cause analyses following security events.

Third-Party & Cloud Security

• Perform cybersecurity and technology risk due diligence on vendors, SaaS providers, cloud platforms (AWS/Azure), and InsurTech partners.
• Ensure third-party outsourcing risks adhere to regulatory requirements regarding data privacy and operational resilience.

 Risk Assessments & Remediation

• Conduct Technology Risk Assessments (TRAs) for new system deployments, digital transformation initiatives, and API integrations.
• Track Key Risk Indicators (KRIs) and monitor the remediation of findings from IT audits and regulatory inspections.

Requirements:

• Experience: 6–10+ years in Technology Risk, Cybersecurity, or IT Audit, ideally within Insurance, Financial Services, or Big 4 consulting.

• Certifications: CISSP, CISA, CRISC, CISM, or CCSP strongly preferred.

• Technical Knowledge: Strong familiarity with cloud security (AWS/Azure), API security, core insurance application architecture, and regulatory compliance.

Banking & Financial Services

IT - Security

Kowloon

Permanent

HKD 50,001 or above / mth