Manager - Technology Compliance

Duties

• Serve a permanent position to a financial institution;
• Report to the Senior Manager or Department/Division Head on matters related to technology compliance, cyber security, and information security;
• Establish, update, and maintain the unit’s policies, procedures, guidelines, and plans, particularly those related to regulatory, compliance, and law-enforcement matters;
• Participate in cyber or information security drills initiated by industry bodies or regulators;
• Assist the Head in liaising and communicating with designated authorities or regulators;
• Assist in arranging and/or handling incident reporting matters related to IT, cybersecurity, and system incidents;
• Keep abreast of the latest cyber security‑related law‑enforcement, regulatory, and/or industry requirements to facilitate the identification of potential enhancement areas;
• Communicate and work with other departments/divisions on cyber and information security controls and enhancement matters;
• Arrange and/or conduct computer‑system security risk assessments, technical assessments, audits, and reporting according to the scope and requirements;
• Perform any other ad‑hoc duties or projects as assigned.

Requirements

• University degree, preferably in information technology, information/cyber security, computer science, or a related discipline;
• Minimum 5 years of experience in information/cyber security or technology risk management. Candidates with less experience who meet the requirements may be considered for the deputy manager position;
• Good understanding of technology risk management and cyber security best practices, with broad knowledge of fintech, data privacy, and/or industry practices;
• Knowledge of ISO 27001, CSA STAR, the HKMA SPM, the CFI 2.0 framework, technology risk management, and cyber security‑related guidelines;
• CISA, CISM, CDPSE, CRISC, CISSP, CEH, CCSP, CREST, and/or other cyber resilience‐related certifications preferred;
• Team player with sound interpersonal and communication skills;
• Red/Blue Team knowledge and experience are an advantage;
• Good problem‑solving and analytical skills;
• Good command of written and spoken English and Chinese.

Years of Total Post‑Quali Exp: 5.0

Years of Relevant Exp: 5.0

Last Update: 10 Jun 2026

Apply To: [protected-email-address]

Direct Line: [protected-phone-number]