Insurance - Manager, Technology Risk & Security

About the Role: Our client, a well-established life insurance institution, is looking for a Manager – Technology Risk & Security to strengthen its Information Security & Cybersecurity function in Hong Kong. This is a hands-on role responsible for driving the company’s cybersecurity programme, managing operational security activities, and supporting secure technology initiatives. Key Responsibilities: - Support the ongoing implementation, operation, and enhancement of the organisation’s information security and cybersecurity framework. - Carry out day-to-day cybersecurity operations, including security monitoring, vulnerability management, security assessments, and incident response. - Conduct risk assessments, third-party/vendor security reviews, and compliance checks to meet regulatory and industry standards. - Perform security reviews across the system development lifecycle (SDLC), covering security requirements, architecture, vulnerability assessments, source code reviews, and remediation tracking. - Lead or contribute to cybersecurity projects, security testing, system enhancements, and related technology initiatives. - Stay updated on emerging cyber threats and technologies; prepare management reports, audit materials, and provide support during security incidents or critical events. Qualifications & Experience: - Degree in Computer Science, Cybersecurity, Information Security, Information Technology, or related fields. - Minimum 7 years of solid experience in cybersecurity, information security, technology risk, or IT risk — preferably within insurance, banking, or other regulated industries. - Strong knowledge of core cybersecurity domains including vulnerability management, incident response, cloud security, identity & access management, and security monitoring. - Familiarity with Secure SDLC, application security, vulnerability assessment methodologies, and security testing practices. - Understanding of relevant regulatory and industry frameworks such as HKIA GL20, ISO 27001, NIST CSF, or CIS Controls. Professional certifications are an advantage. - Strong analytical, communication, and problem-solving skills, with genuine interest in emerging technologies (AI, cloud, automation, DevSecOps). - Candidates with slightly less experience may be considered for Assistant Manager level.

• Senior Director – Finance Business Partner, Technology (Insurance Group | Hong Kong)

  Hong Kong, Hong Kong SAR