Back to search

IT Security and Risk Officer - Insurance, 25k

Hong Kong Temporary View Job Description
As a IT Security and Risk Officer, you will coordinate security risk activities for the Technology department within the Insurance industry. You will help maintain clear risk records and support informed security decisions across the business.
  • Vendor security assessments, risk reviews, and security assurance activities
  • Insurance

About Our Client

My client is one of the insurance companies in Hong Kong.

Job Description

As a Security Risk Coordinator, your main responsibilities will include:

  • Conduct vendor security assessments and assurance reviews to evaluate security risks and control effectiveness.
  • Review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence to assess control adequacy.
  • Identify security gaps, control weaknesses, exceptions, and residual risks, and support remediation planning and tracking.
  • Coordinate with business stakeholders, technical teams, and vendors to gather information and resolve assessment queries.
  • Track and follow up on security findings, risks, and remediation actions through to closure.
  • Maintain accurate assessment records, risk registers, action plans, and supporting documentation for audit and compliance purposes.
  • Support ongoing monitoring and periodic reviews of third-party vendors based on risk profile and criticality.
  • Prepare risk summaries, assessment reports, management updates, and stakeholder communications.
  • Contribute to the continuous improvement of security assessment methodologies, processes, templates, and governance frameworks.

The Successful Applicant

A successful Security Risk Coordinator should have:

  • Degree or Diploma in Information Security, Cybersecurity, Computer Science, Information Systems, Technology Risk, or a related discipline.
  • 2-4 years of experience in Information Security, Technology Risk, IT Audit, Security Governance, Risk & Compliance, or Third-Party Risk Management.
  • Experience reviewing security controls, questionnaires, and supporting evidence is preferred.
  • Good understanding of information security principles, technology risks, and security control frameworks.
  • Exposure to areas such as third-party/vendor risk, cloud security, AI security, application security, outsourcing, or operational resilience is advantageous.
  • Strong analytical and problem-solving skills with excellent attention to detail.
  • Effective stakeholder management and communication skills, with the ability to work across business, technical, and vendor teams.
  • Excellent written and verbal communication skills in English and Cantonese.
  • Well-organized with the ability to manage multiple assessments and priorities simultaneously.
  • Professional certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 are desirable but not required.

What's on Offer



Apply for this Security Risk Coordinator role to discuss the position in more detail.

Contact
Agnes Chow
Quote job ref
JN-102026-7134392
Phone number
+852 25306125

Job summary

Function
IT
Specialisation
Security
What is your area of specialisation?
Insurance
Location
Hong Kong
Job Type:
Temporary
Consultant name
Agnes Chow
Consultant phone
+852 25306125
Job Reference
JN-102026-7134392

Diversity & Inclusion at Michael Page

We don't just accept difference - we celebrate it. We encourage applicants from all backgrounds to apply for this role and are committed to building inclusive, diverse workplaces where everyone can thrive. If you require any support or reasonable adjustments during the recruitment process, please let us know.