- Support security governance frameworks, policies, and standards
- Provide security risk and governance guidance to business and project teams
- Prepare governance reports, dashboards, KPIs/KRIs, and track remediation actions
- Support audits, risk assessments, and regulatory reviews, including evidence collection
- Monitor regulatory developments and enhance governance processes and controls
- University degree in IT, Cybersecurity, Risk Management, or a related discipline
- Minimum 3 years' experience in security governance, risk, compliance, or audit
- Experience in risk assessments, governance reporting, audits, or assurance reviews
- Holder of CISA, CISM, CISSP, CRISC, or equivalent professional certification
- Fluent in English and Cantonese, with strong stakeholder communication skills