Senior Technical Manager, IT Risk and Controls

Leads the evolution of technology risk practices across the IT function, ensuring they remain relevant to modern environments such as cloud architectures, agile delivery models, DevSecOps, and emerging cyber and resilience risks. It oversees the Technology Control Library and forward-looking Key Risk Indicators, transforms risk data into actionable decision intelligence, promotes continuous learning from incidents and near-misses, and acts as a trusted advisor to senior IT stakeholders. The role sits within the IT Risk & Controls Department, which establishes and maintains a robust risk management methodology, aligns with the Enterprise Risk Management Framework and Technology Risk Management Framework, and works closely with business units to promote accountability and transparency across IT and business functions.

• Lead the evolution of technology risk practices across the IT function, ensuring relevance to modern environments such as cloud architectures, agile delivery models, DevSecOps, and emerging cyber and resilience risks, and drive a shift from static, checklist-driven controls to adaptive
• Outcome-focused approaches that support speed, scalability, and innovation.
• Oversee and continuously improve the Technology Control Library, ensuring controls are risk-aligned, proportionate, and practical for today's technology landscape
• And design and maintain forward-looking Key Risk Indicators that leverage operational and technical data to provide early warning signals beyond traditional compliance metrics.
• Transform risk data into actionable decision intelligence by developing clear risk dashboards, highlighting trends and trade-offs, and translating technical issues into meaningful business insights to enable senior leadership to make informed decisions.
• Promote a culture of continuous learning by turning incidents, near-misses, and disruptions into opportunities for improvement, identifying root causes, systemic themes, and control weaknesses, and driving targeted enhancements to prevent recurrence.
• Act as a trusted advisor to senior IT stakeholders, influencing through expertise and credibility, supporting governance processes, guiding teams through complex risk decisions in fast-paced environments, and building organisational capability by mentoring and developing risk professionals.

• Over 10 years of expertise in designing, implementing, and leading technology risk frameworks and control assessment programmes.
• Strong background in control assessment methodologies, with a focus on modernising approaches and driving continuous improvement.
• Deep knowledge of technology risk, control design, and operational resilience.
• Hands-on experience building and managing operational risk functions within IT organisations.
• Well-versed in enterprise architecture, service management, asset management, change management, and system migrations.
• Strong awareness of industry best practices in IT governance, risk, and internal controls.
• Experience using GRC tools and dashboards as strategic insight platforms rather than static repositories.
• Skilled in assessing and quantifying risks, evaluating mitigation strategies, and delivering practical, business-aligned recommendations.
• Technically astute and analytical decision-maker who can operate effectively in complex, matrixed environments and influence stakeholders at all levels.
• Strong leadership, relationship management, and communication skills, with high ethical standards and professionalism.
• Proactive and adaptable, with the ability to manage multiple priorities under pressure while aligning risk management practices with organisational culture, strategy, and business objectives.

• Bachelor's Degree (preferred) in a relevant discipline (e.g., Operational Risk Management, Information Security, IT Risk Management).
• Professional risk management certification (e.g., ISO 31000, CISA, CRISC) and/or industry body affiliation is an advantage.

• Competitive benefits package
• Dynamic working environment
• Development opportunities

It has a unique value creation model, generates sustainable economic and social value for the community, supports the HKSAR Government in combatting illegal gambling, is Hong Kong's largest single taxpayer and one of the city's major employers, and its Charities Trust is one of the world's leading charity donors.