Technology Risk & Compliance

Key Responsibilities

• Lead and support engagements in technology risk, cybersecurity, and regulatory compliance (e.g., SRAA, SOC 2, ISO 27001, PDPO, HKMA/SFC requirements).
• Perform risk assessments, control reviews, and gap analyses across client environments.
• Contribute to the development of policies, procedures, and governance frameworks.
• Assist in Privacy Impact Assessments (PIA) and AI governance advisory projects.
• Utilize AI tools to enhance report drafting, data analysis, and audit efficiency.
• Prepare high-quality client deliverables, including reports, presentations, and recommendations.
• Engage with clients and stakeholders to communicate findings and remediation strategies.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related discipline.
• Professional certification such as CISA, CISSP, or equivalent (mandatory).
• 3–6 years of relevant experience in IT audit, cybersecurity, or risk advisory.
• Solid understanding of frameworks and standards such as ISO 27001, NIST, SOC 2, and privacy regulations (e.g., PDPO).
• Experience or strong interest in applying AI tools (e.g., generative AI, automation tools) in audit, compliance, or advisory work.
• Strong analytical, documentation, and report-writing skills.
• Excellent communication skills in English; Cantonese/Mandarin is an advantage.

Preferred Attributes

• Experience in financial services, insurance, or technology sectors.
• Exposure to AI governance, model risk management, or emerging technology risks.
• Familiarity with security testing tools (e.g., Nessus, Burp Suite) is a plus.
• Proactive mindset with the ability to manage multiple engagements.

What We Offer

• Exposure to high-impact advisory projects across industries.
• Opportunities to work on emerging areas such as AI governance and regulatory technology.
• Collaborative and growth-oriented environment.
• Competitive compensation and career development opportunities.

Competitive package will be offered to the right candidate(s), including 5-day work week, birthday leave & medical insurance coverage.