Technology & Operation Risk Manager

Overview 

Our client, a well-known financial service company in Hong Kong, is looking for a proactive Technology & Operational Risk Manager to help strengthen internal controls and drive practical improvements across technology and business processes.

This opportunity suits a curious, analytical professional who enjoys looking beyond checklists—understanding how processes work, identifying gaps and partnering with stakeholders to deliver sustainable improvements.

You will join a lean team with broad exposure across technology risk, operational controls, system development governance and process enhancement.

Key Responsibilities

• Conduct risk-based reviews of technology and operational processes, assessing both control design and operating effectiveness through sampling, evidence review and clear documentation of findings.
• Review product governance and the system development life cycle, including user requirements, system specifications, testing and production deployment controls.
• Constructively challenge unclear requirements, gaps in test coverage and insufficient supporting evidence, helping stakeholders understand the risks and strengthen controls.
• Review technology and operational incidents, identify root causes and assess whether similar control weaknesses may exist elsewhere.
• Recommend practical corrective and preventive actions, monitor remediation progress and validate whether implemented improvements are effective and sustainable.
• Support the refinement of Risk and Control Self-Assessments and ongoing reviews of key controls.
• Explore opportunities to improve risk management processes through automation and data analysis.
• Work closely with business and technology stakeholders, contributing to risk reporting, thematic reviews and regulatory examinations as required.

Qualifications

• A bachelor’s degree in information technology, risk management, accounting, finance, business or a related discipline.
• At least five years of relevant experience in technology risk, IT audit, IT controls assurance, internal control or a related field, preferably within financial services or a professional services firm.
• Recent practical experience reviewing technology controls, with the ability to connect technical issues to business and operational risks.
• A sound understanding of SDLC governance, requirements quality, testing practices and change／deployment controls.
• Experience assessing control effectiveness, reviewing evidence, documenting findings and following through on remediation.
• Strong analytical thinking and the confidence to ask meaningful questions and provide constructive, actionable advice.
• Familiarity with HKMA regulatory expectations is an advantage; however, extensive regulatory compliance experience is not essential for candidates with strong technology risk and controls capabilities.
• A proactive approach, strong learning agility and the ability to work independently across different assignments.
• An interest in AI, workflow automation or data-driven process improvement.
• Good communication skills in English and Chinese, including Putonghua.

Why Consider This Role?

• Make a tangible contribution to internal control enhancement rather than focusing solely on routine reporting.
• Gain broad exposure across technology and operational risk within digital banking.
• Work closely with business and technology teams to influence practical improvements.
• Explore how automation and AI can support more effective risk management.