- Location
- Quarry bay, Hong Kong Island
- Type
- Full-time
- Experience
- 5+ years
- Closing date
- Today
- Source
- Vincere
Description
Our client is seeking an experienced Business and Risk Analyst to support enterprise risk management (ERM) and technology risk control initiatives across the Club. The role is responsible for conducting risk assessments, validating business-managed technologies (BMT), and ensuring compliance with the club’s Enterprise and Technology Risk Management Frameworks.
Key Responsibilities
-
Collect, compile, validate, and reconcile information to build and maintain the BMT inventory.
-
Perform risk assessments aligned with the ERM Policy and Technology Risk Management Framework (TRMF).
-
Identify, evaluate, and document risks associated with business-managed technologies, including system governance and operational dependencies.
-
Review security measures, internal controls, and identify control gaps for BMT systems.
-
Support divisions in implementing corrective actions and monitoring remediation progress.
-
Contribute to risk reporting and analysis for management review.
-
Collaborate with IT, compliance, and business teams to strengthen enterprise-wide risk posture.
Requirements
-
Bachelor’s degree in Risk Management, Information Systems, Business, or related discipline.
-
Minimum 5 years of experience in risk assessment or technology risk management, preferably within large enterprises or financial institutions.
-
Strong understanding of risk frameworks and maturity baselines (e.g., ISO 31000, COBIT, NIST, or equivalent).
-
Solid analytical and problem-solving skills, with attention to detail in data validation and gap identification.
-
Excellent communication and stakeholder engagement skills.
-
Familiarity with enterprise risk management systems and reporting tools is an advantage.