[Skip to main content](#main-content) [ OpenNash ](https://opennash.com/) / [Jobs](https://jobs.opennash.com/) [ 01 Search jobs](https://jobs.opennash.com/search/)[ 02 Companies](https://jobs.opennash.com/explore/)[ 03 Hiring report](https://jobs.opennash.com/reports/hiring/)[ 04 AI assistants](https://jobs.opennash.com/connect/)[ 05 How it works](https://jobs.opennash.com/methodology/) Hong Kong Exchanges · Hong Kong # AVP/VP - Cyber Risk, Operational Risk & Resilience Hong Kong Executive Security Listed on Hong Kong Exchanges’s official careers site. Posted October 21, 2026. Check that it is still open and apply there. [Apply on Hong Kong Exchanges’s careers site →](https://hkex.wd3.myworkdayjobs.com/HKEXCareerPage/job/HK-ONE-ES-24F/AVP-VP---Cyber-Risk--Operational-Risk---Resilience_R004549) [OpenNash Jobs](https://jobs.opennash.com/) / [Hong Kong Exchanges](https://jobs.opennash.com/companies/hong-kong-exchanges/) / AVP/VP - Cyber Risk, Operational Risk & Resilience ## Job description ### Company Introduction We’re home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all." ### Job Summary Provide independent second-line oversight, advice and constructive challenge over the Group's management of cyber, AI and data risks. Lead cyber, data and AI risk assessments, second line external red team testing and cyber drills / table top exercises, provide emerging-risk analysis and report material risks to senior management and governance committees. ### Job Responsibilities Identify, assess and monitor material cyber, data and AI risks; provide independent advice and constructive challenge to ITD and other first-line owners, and escalate significant exposures with recommendations for mitigation and remediation. Monitor, develop and report key cyber risk and performance indicators, escalating trends and providing risk insights where appropriate Coordinate and oversee risk-based external threat led red-team and adversarial security testing; challenge scope, scenarios, coverage, independence, findings and residual risk. Assess and challenge ITD's defence-in-depth approach across identity, network, endpoint, application, data, cloud, third-party and recovery controls, including attack paths, dependencies, monitoring, containment and potential single points of failure, including thematic risk assessments of key risk areas and control initiatives Develop and coordinate cyber tabletop and crisis-simulation activities that test decision-making, escalation, regulatory notification, communications, recovery and dependencies; capture lessons and monitor material follow-up actions. Provide independent insight supporting responsible AI governance, assess cybersecurity, data, model, third-party, human-oversight and resilience risks, and monitor emerging AI-enabled threats. Support the Group's data governance and data risk management journey by advising on data confidentiality, integrity, availability, classification, access, lineage, quality, retention, sharing and resilience. Review incidents, threat intelligence, vulnerabilities, testing and regulatory developments; initiate thematic reviews, translate technical issues into business and resilience implications, report to senior management and governance committees, and lead significant workstreams and stakeholder engagement. ### Job Requirements A self-motivated, reliable, collaborative and proactive individual with strong influencing skills and excellent written and verbal communication abilities, capable of communicating complex cyber and technology risk matters to technical and non-technical audiences, including senior executives and governance committees. Proficiency in English and Chinese is required; Putonghua would be an advantage. At least 7 years (AVP) or 10 years (VP) of relevant experience in cyber security and related fields, preferably within the financial services sector or in professional services supporting financial services clients. Strong organisational and programme leadership skills, with the ability to prioritise, manage multiple significant assignments and deliver high-quality outcomes with limited supervision. Strong stakeholder management skills and the confidence and credibility to provide constructive challenge, manage differing perspectives and achieve appropriate risk outcomes. Strong practical knowledge of cyber risk governance, security architecture, defence-in-depth, red-team testing, penetration testing, cyber resilience and crisis exercises. Experience overseeing security assessments and translating technical findings into business, operational-resilience and systemic-risk implications. While the role will primarily focus on cyber security, a working knowledge of AI governance and AI security risks and an understanding of data governance and data risk concepts would be advantageous. Professional certifications such as CISA, CISSP, CRISC, CISM or other relevant technology risk, cybersecurity or audit qualifications are preferred. Qualifications in AI, cloud, data governance or offensive security would be advantageous. Knowledge of exchange operations, financial-market infrastructure, critical market services and relevant regulatory requirements and industry practices would be highly regarded. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace. ### Location HKEX - Exchange Square Shift: Standard - 40 Hours (Hong Kong SAR) ### Scheduled Weekly Hours 40 Worker Type: Permanent ## At a glance - Posted by the employer: Oct 21, 2026 - First seen by OpenNash: Oct 27, 2026 - Last checked: Nov 10, 2026 - Listed for: 20 days - Location: Hong Kong[Apply on Hong Kong Exchanges’s careers site →](https://hkex.wd3.myworkdayjobs.com/HKEXCareerPage/job/HK-ONE-ES-24F/AVP-VP---Cyber-Risk--Operational-Risk---Resilience_R004549) ## Hiring at Hong Kong Exchanges - Open jobs: 128 - New in the last 7 days: After two weekly collections - Tracked since: Aug 1, 2026 [All Hong Kong Exchanges jobs](https://jobs.opennash.com/companies/hong-kong-exchanges/) · [Weekly hiring report](/reports/hiring/) ## More jobs at Hong Kong Exchanges ### [Assistant Vice President - Group Risk Management - IT Risk](https://jobs.opennash.com/companies/hong-kong-exchanges/jobs/241c285f31e7395fbe85/) Hong Kong ### [Assistant Vice President, Market Risk Management](https://jobs.opennash.com/companies/hong-kong-exchanges/jobs/0cd0e0ae64099ce5e7a2/) Hong Kong ### [Assistant Vice President, Operations Risk Governance, Operations](https://jobs.opennash.com/companies/hong-kong-exchanges/jobs/273c07c82e80f8a4eb20/) Hong Kong ### [Vice President - Regulatory Advisory & Market Compliance](https://jobs.opennash.com/companies/hong-kong-exchanges/jobs/b3b95478a74cba6e35e1/) Hong Kong ### [Vice President / Assistant Vice President - Compliance Risk Oversight & Regulatory Coordination](https://jobs.opennash.com/companies/hong-kong-exchanges/jobs/e9c5f91d5b682c9c8f7e/) Hong Kong ## Similar jobs at other companies ### [Senior Analyst - Operational Risk - Cyber and Technology Risk Management](https://jobs.opennash.com/companies/macquarie-group/jobs/a23b149f26fdd3934526/) Macquarie Group Limited · Sydney ### [Risk, APAC Cyber & Technology Operational Risk Technical Coverage, Vice President, Hong Kong/Singapore](https://jobs.opennash.com/companies/goldman-sachs-group/jobs/c0bcab08b2f459f29841/) Goldman Sachs Group · Hong Kong ### [Risk, APAC Cyber & Technology Operational Risk Technical Coverage, Vice President, Tokyo](https://jobs.opennash.com/companies/goldman-sachs-group/jobs/16e33a1aa47e342a8376/) Goldman Sachs Group · Minato-Ku, Japan ### [Operational Manager](https://jobs.opennash.com/companies/cvs-health/jobs/b2e621a403f67a407624/) CVS Health · Montvale, NJ [Security jobs](/functions/security/) OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. [ OpenNash ](https://opennash.com/) AI-native services firm that builds custom software and 24/7 AI agents. OpenNash Jobs is an OpenNash Applied AI project. [Book time with OpenNash](https://calendly.com/opennash/new-meeting?hide_gdpr_banner=1) Jobs - [Search jobs](https://jobs.opennash.com/search/) - [Companies](https://jobs.opennash.com/explore/) - [Hiring report](https://jobs.opennash.com/reports/hiring/) - [AI assistants](https://jobs.opennash.com/connect/) - [How it works](https://jobs.opennash.com/methodology/) OpenNash - [opennash.com](https://opennash.com/) - [Services](https://opennash.com/ai-agent-consulting/) - [OpenNash CX](https://opennash.com/cx/) - [AI Tools](https://opennash.com/ai-tools/) - [Blog](https://opennash.com/blog/) - [About](https://opennash.com/about/) Contact - [hello@opennash.com](mailto:hello@opennash.com) - [LinkedIn](https://www.linkedin.com/company/opennash) - [Support](https://jobs.opennash.com/support/) - [Privacy](https://jobs.opennash.com/privacy/) - [Terms](https://jobs.opennash.com/terms/) © 2026 OpenNash, Inc. Company names and public job postings belong to their respective owners. Employers control source availability and application decisions.