Key responsibilities:

• Lead enterprise cyber risk frameworks and methodologies aligned with Technology Risk Management standards
• Assess IT and business risks, define risk appetite, and monitor KRIs, KPIs, and emerging cyber threats
• Strengthen control frameworks, risk mitigation, and cyber security posture through effective risk ownership
• Deliver executive risk intelligence, posture reporting, audit support, and trend analysis for senior management
• Drive cyber security standards, awareness, privacy, data protection, and resilience initiatives across the organisation
• Build stakeholder alignment and team capability through strategic collaboration, knowledge sharing, and mentoring

Candidate profile:

• 7+ years' experience in technical IT, cyber risk governance, metrics reporting, or IT GRC operations
• Degree in Computer Science, IT, Cybersecurity or related discipline, with CISSP, CISA, GIAC or CEH preferred
• Hands-on expertise in enterprise IAM, SSO, MFA, Okta, Azure, SaaS integrations, and security solutions
• Proven stakeholder management across business units, vendors, and onshore/offshore IT teams in complex environments
• Strong ownership, problem-solving, communication, business writing, and PowerPoint skills, with fluency in written and spoken English, Mandarin, and Cantonese

About this company:

A well-established entertainment organisation in Hong Kong is recognised for its collaborative culture, strong investment in professional development, and commitment to building a resilient digital environment. It offers an inclusive, supportive workplace with opportunities to strengthen technical and leadership capabilities while contributing to future-focused cyber security initiatives.

Keywords: Cyber Risk Management, Cyber Security Governance, IT Risk Management, IT GRC, Cyber Resilience

What's next:

Build the future of cyber resilience and lead enterprise-wide risk transformation. Apply now!