Assistant Vice President - Group Risk Management - IT Risk

Company Introduction:

We’re home to Asia's most dynamic and vibrant capital markets.
Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day.

HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."

Job Summary:

The position is an AVP in the IT Risk team.

Job Duties:

Job Responsibilities

• Perform technology risk assessments by evaluating the adequacy and effectiveness of risk identification, risk assessment, and risk management practices implemented by business and technology functions, covering critical business operations, application systems, and technology infrastructure.

• Provide technology risk advisory to business and technology stakeholders throughout project lifecycles, change initiatives, and strategic programs to ensure technology risks are appropriately identified, assessed, and managed.

• Lead the enhancement of technology risk and resilience initiatives, incident management and response activities.

• Oversee the effectiveness of technology risk governance, control frameworks, and remediation plans, ensuring material risks and control deficiencies are appropriately addressed, monitored, and escalated.

• Identify, evaluate, and monitor evolving technology-related risks; escalate material risks to the relevant stakeholders in a timely manner, and provide recommendations for risk mitigation and remediation.

• Prepare technology risk reports and management information for governance forums, risk committees, and senior management, providing clear risk insights and recommendations to support informed decision-making.

• Support the maintenance of effective relationships and collaboration with regulators, exchange peers, industry partners, and internal stakeholders on matters relating to technology risk and resilience.

Job Requirements

• A self-motivated, reliable, collaborative, and proactive individual with strong influencing skills and excellent written and verbal communication abilities. Capable of effectively communicating technology risk matters to a broad range of technical and non-technical audiences, including business stakeholders and senior executives. Proficiency in English and Chinese is required, while Putonghua would be an advantage.

• Strong organisational and task management skills, with the ability to prioritise effectively, manage multiple assignments concurrently, and consistently deliver high-quality outcomes with minimal supervision.

• Strong stakeholder management and interpersonal skills, with the ability to engage stakeholders in a timely and effective manner, manage expectations, and achieve alignment on key objectives and outcomes.

• At least 6 to 8 years of relevant experience in technology risk management, preferably within the financial services sector or in professional services supporting financial services clients. Demonstrated knowledge of technology risk governance, controls, and risk management practices from both operational and strategic perspectives.

• Strong understanding of industry-leading practices for managing technology risk, cybersecurity, and operational resilience, including emerging risks associated with cloud computing, artificial intelligence, distributed ledger technology, smart contracts, APIs, and other evolving technologies.

• Solid experience in technology risk assessments, control reviews, audits, project risk reviews, and/or risk management related to emerging technologies and technology transformation initiatives.

• Professional certifications such as CISA, CISSP, CRISC, CISM, or other relevant technology risk, cybersecurity, or audit qualifications are preferred. Additional certifications or accreditations in cloud computing, artificial intelligence, DLT, or other emerging technologies would be an advantage.

• General knowledge of exchange operations, financial market infrastructure, and applicable regulatory requirements and industry practices would be highly regarded.

HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location:

HKEX - Exchange Square

Shift:

Standard - 40 Hours (Hong Kong SAR)

Scheduled Weekly Hours:

40

Worker Type:

Permanent