CareerPlan

AVP/VP - Cyber Risk, Operational Risk & Resilience

Hong Kong, Hong Kong, HKFull-time2026-10-14 → 2026-11-07

Core

Provide independent second-line oversight, advice, and constructive challenge over the Group's management of cyber, AI, and data risks, leading risk assessments, red team testing, and crisis simulations.

Role type

Senior IC cyber risk and resilience leader (second-line)

Builds

Independent risk oversight, red-team testing programs, and crisis simulation exercises for a global capital markets operator

Domain

Financial services / Cybersecurity / AI Governance / Data Risk

Required skills

Cyber risk governance, security architecture, defence-in-depth, red-team testing, penetration testing, cyber resilience, crisis simulation, data governance, AI security risks, stakeholder management, program leadership

Preferred skills

CISA, CISSP, CRISC, CISM, AI governance, cloud security, offensive security, exchange operations knowledge

Technologies

None explicitly listed

Responsibilities

Identify, assess, and monitor material cyber, data, and AI risks; coordinate external threat-led red-team and adversarial security testing; develop and coordinate cyber tabletop and crisis-simulation activities; review incidents, threat intelligence, and vulnerabilities; translate technical issues into business and resilience implications; report to senior management and governance committees

Seniority

Senior (AVP) to Executive (VP), hands-on IC with strategic oversight