Senior Technology Risk Analyst / Lead
Primary stack
Job description
About the Position
Senior Technology Risk Analyst / Lead
Location: Hong Kong SAR
Employment Type: Full-time
Work Location: On-site
At Lalamove, we believe in the power of community. Millions of drivers and customers use our technology every day to connect with one another and move things that matter. Delivery is what we do best and we ensure it is always fast and simple. Since 2013, we have tackled the logistics industry head on to find the most innovative solutions for the world’s delivery needs. We are full steam ahead to make Lalamove synonymous with delivery and on a mission to impact as many local communities we can. We have massively scaled our efforts across Asia and now have our sights on taking our best in class technology to the rest of the world. And we are looking for talented professionals to join us in this journey!
Responsibilities
- Risk Assessment & Tracking: Maintain the enterprise risk register and conduct comprehensive risk assessments across IT infrastructure, cloud environments, and the System Development Life Cycle (SDLC) for various organizational projects and technical assets.
- Remediation Coordination: Coordinate risk remediation plans across different teams and meticulously track risk acceptance decisions.
- Reporting & Visibility: Develop and maintain risk dashboards, generating clear, high-level executive summaries for management review.
- Emerging Tech Governance: Champion and drive AI security governance initiatives to ensure the safe and compliant adoption of artificial intelligence technologies.
- Audit & Compliance: Actively support internal audit initiatives and facilitate robust security control testing. Maintain and continuously improve the Information Security Management System (ISMS) in compliance with ISO 27001 standards. Conduct regular PCI DSS assessments.
Requirements
- Education: Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field.
- Experience: 5+ years of experience in IT Risk Management, Information Security, Compliance, or IT Audit.
- Technical Skills:
- Strong understanding of risk assessment methodologies and frameworks (e.g., NIST CSF, ISO 27001, PCI DSS).
- Experience maintaining risk registers and tracking remediation lifecycles.
- Solid knowledge of IT infrastructure (networks, databases, cloud architecture) and secure system development practices (e.g., DevSecOps, CI/CD pipelines, secure architecture) to accurately identify and evaluate technical vulnerabilities.
- Familiarity with privacy regulations and emerging AI governance standards.
- Soft Skills: Exceptional communication skills with the ability to translate complex technical risks into business terms for management and stakeholders.
- Certifications (Preferred): CRISC, CISA, CISM, ISO 27001 Lead Auditor or similar industry-recognized risk and audit certifications.
About the Company
Lalamove is a leading logistics and delivery platform that has been revolutionizing the way people and goods move across cities since 2013. With a mission to make delivery fast and simple, we have scaled our operations across Asia and are now aiming to expand globally. Our innovative solutions and commitment to community impact have made us a preferred choice for millions of users. Join us in our journey to make Lalamove synonymous with delivery excellence.
To all candidates: Lalamove respects your privacy and is committed to protecting your personal data. Please take time to read and understand our Candidate Privacy Notice.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
© Lalamove. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Гонконг (Гонконг)