Description
We are seeking an experienced Information Risk Management professional to join our team in Hong Kong. The successful candidate will have a strong understanding of technology and information security risks and controls, disaster recovery, and excellent communication, presentation, and influencing skills.
Job Summary: The Information Risk Management Role operates across multiple markets and their businesses, functions, and geographies to promote and enhance awareness of risks and controls.
Responsibilities:
- Strategy Execution and Planning Support:
- Execute agreed AIRM strategic priorities, annual plans, and roadmap activities under the direction of the Director and AIRM leadership.
- Provide planning and administrative support for strategy and business reviews.
- Plan and coordinate AIRM engagement activities, including offsite activities, team meetings, leadership sessions, workshops, knowledge-sharing sessions, and recognition activities.
- Coordinate onboarding and team integration activities.
- Promote collaboration and connectivity across AIRM teams, locations, and risk domains.
- Governance and Committee Management Coordination:
- Coordinate AIRM governance forums, including the Asia Information Risk Committee (AIRC).
- Prepare clear decision papers, briefing notes, and governance materials.
- Maintain governance artefacts, mandates, calendars, decision logs, and action trackers.
- Executive Reporting, Risk Analytics, and Management Information:
- Coordinate quarterly and ad hoc Asia information risk reporting.
- Produce concise, decision-oriented reporting for senior management and committees.
- Apply consistent data definitions, ownership, quality checks, and reporting standards.
- Provide trend analysis, forward-looking insights, and practical recommendations.
- Support the development and improvement of dashboards.
- Second-Line Risk Oversight and Advisory:
- Provide second-line Information Risk Management (IRM) oversight of first-line defense activities.
- Monitor material risk themes, issues, exceptions, and remediation progress.
- Deliver market-specific risk insights and advisory support to stakeholders.
Requirements:
- Bachelor's degree or equivalent qualification in Information Technology, Information Security, Risk Management, or a related discipline.
- Minimum 3-5 years of relevant experience in information risk management or information security management.
- Sound technology background with risk management sense.
- Broad knowledge of financial services/insurance business and related products.
- Solid written and oral communication and presentation skills.
- Detail-oriented with good analytical, critical thinking, and problem-solving skills.
- Solid influencing skills with the ability to build effective relationships.
Preferred Qualifications:
- Professional designation, e.g., CISSP, CRISC, CISA, CSSLP, or CISM.
- High proficiency in data analytics tools such as PowerBI.
What We Offer:
- We'll empower you to learn and grow the career you want.
- We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
- As part of our global team, we'll support you in shaping the future you want to see.