ICT & Operational Risk Manager
Full-timeJob Overview
Our client, a leading global insurer, is looking for a ICT & Operational Risk Manager to support their Asia business. This is a high-impact regional role with strong exposure to senior stakeholders across Hong Kong and multiple markets in Asia.
If you enjoy working at the intersection of technology, cyber risk, and business strategy, and thrive in a fast-evolving environment, this could be a great fit.
You’ll play a key role in shaping and strengthening ICT and cyber risk oversight across the region. Working closely with Group and regional leadership, you’ll translate complex risk data into clear, actionable insights for decision-makers.
Our client, a leading global insurer, is looking for a ICT & Operational Risk Manager to support their Asia business. This is a high-impact regional role with strong exposure to senior stakeholders across Hong Kong and multiple markets in Asia.
If you enjoy working at the intersection of technology, cyber risk, and business strategy, and thrive in a fast-evolving environment, this could be a great fit.
You’ll play a key role in shaping and strengthening ICT and cyber risk oversight across the region. Working closely with Group and regional leadership, you’ll translate complex risk data into clear, actionable insights for decision-makers.
What you will do:
- Lead the end-to-end ICT risk reporting cycle, including monthly monitoring and quarterly reporting deliverables
- Support the ongoing implementation and enhancement of ICT risk frameworks across Asia
- Drive regional initiatives such as cyber risk quantification and analysis
- Partner with Group and regional stakeholders to interpret evolving digital and cyber risk requirements and ensure consistent application across markets
- Work closely with local risk teams to ensure high-quality, accurate, and timely reporting aligned to global standards
- Provide constructive challenge and guidance to improve risk assessments and reporting practices
- Conduct deep-dive analyses and thematic reviews on key risk areas
- Contribute to broader operational risk activities, including enterprise-wide risk assessments
What you will need:
- Around 5+ years of experience in operational, ICT, digital, or cyber risk—ideally within financial services or insurance
- Proven ability to work in a regional or multinational environment, engaging stakeholders across multiple countries
- Strong understanding of technology and cyber risk frameworks, controls, and mitigation approaches
- Excellent analytical skills, with the ability to interpret complex data and identify meaningful trends and insights
- Confident communicator who can simplify complex topics for senior stakeholders
- Proactive, self-driven, and comfortable operating in a fast-paced, evolving environment
Highly desirable:
- Familiarity with frameworks such as ISO 31000, ISO 27001, COBIT, ITIL
- Exposure to cloud transformation, AI, or digital initiatives
- Relevant certifications (e.g. CISA, CISM, CRISC, CGEIT, ITIL, ISO 27001)
- Broader experience in enterprise risk management and risk assessments