Technology Risk Staff/Senior Associate – Hong Kong

About the role

As a Technology Risk Staff or Senior Associate at EY, you will help financial services firms in Hong Kong and the Greater Bay Area meet regulatory technology‑compliance requirements, strengthen cybersecurity, and build resilient digital operations. You will work with a global team of specialists to assess, advise, and implement risk‑management solutions for complex IT environments.

Key responsibilities

• Conduct technology compliance reviews for banks, wealth managers, insurers and other regulated entities.
• Analyse IT environments, identify risks and evaluate controls, including cloud‑security aspects.
• Advise clients on licensing requirements and act as a technology‑risk advisor for regional regulators.
• Implement information‑security frameworks such as ISO, NIST, COBIT and SANS.
• Develop governance, incident‑management and cyber‑resilience programmes.
• Assess emerging‑technology risks (blockchain, virtual assets, AI/ML, big data).
• Perform vulnerability scanning, penetration testing and cyber‑attack simulations.
• Deliver security awareness training and support client project management.

Required profile

• Relevant experience in technology risk, information security or related consulting.
• Understanding of Hong Kong and Greater Bay Area regulatory expectations.
• Ability to communicate complex technical concepts to business stakeholders.
• Proactive attitude with a willingness to mentor junior team members.
• Strong analytical and problem‑solving skills.

Required skills

• Cloud security
• ISO (e.g., ISO 27001) standards
• NIST framework
• COBIT methodology
• SANS controls
• Blockchain and virtual‑asset concepts
• Artificial intelligence, machine learning and big‑data analytics
• Vulnerability scanning and penetration testing
• Cyber‑attack simulation