Senior Manager - IT Policy and Compliance

• Formulate the overall strategy, goals, and management system for the IT Policy and Compliance function, including IT Policy Management, Compliance Management, and Issues Management
• Lead and manage all internal and external IT audit and compliance engagements (e.g., HKMA C-RAF, PCI-DSS, SWIFT, internal audits), coordinating evidence collection, facilitating communication with assessors, and tracking responses
• Oversee the issue remediation lifecycle, maintaining a central control issues tracker and ensuring all identified gaps and remediation actions are completed in a timely manner
• Establish and manage the IT Policy framework, acting as the central librarian for all IT and cybersecurity governance documents (policies, standards, procedures) and coordinating regular reviews within the Fintech Division
• Develop, establish, and execute an ongoing IT Compliance Monitoring Program to perform regular compliance checks against internal policies and external regulations
• Act as the primary compliance representative for the Fintech Division, liaising with Internal Audit, Risk, and Legal teams, supporting cross-divisional regulatory initiatives (e.g., ESG, BASEL), and coordinating with external authorities on cybersecurity cases

• Degree holder in Cyber Security, Computer Science, Information Technology, or a related discipline
• min 8 relevant experience in Cyber Security Management, Technology Risk Management, or IT Audit
• Strong understanding of IT management best practices, IT Policy Management Frameworks, and the end-to-end audit engagement process
• Strong understanding and interpretation of IT and cybersecurity legal and regulatory compliance requirements
• Must hold at least one of these, CISA, CISM, CRISC
• With strong problem-solving, analytical, and presentation skills
• Must be able to work independently and under pressure to meet tight deadlines
• Good command of written and spoken English and Mandarin

bonus