{"id":2600230,"url":"https://alion.io/job/hkjc-senior-technical-manager-it-risk-and-controls","title":"Senior Technical Manager, IT Risk and Controls","company":{"id":2691383,"name":"The Hong Kong Jockey Club","domain":"hkjc.com","url":"https://alion.io/company/hkjc","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hong Kong"],"countries":["HK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":62000,"max_usd":180000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2356},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false}],"status":"live","first_seen_at":"2026-10-06T15:00:00Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-11-03T12:18:21Z","board_verified":true,"closed_at":null,"days_open":27,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":27},"description":"The Hong Kong Jockey Club\nFounded in 1884, The Hong Kong Jockey Club (“the Club”) is a world-class racing club that acts continuously for the betterment of our society. The Club has a unique integrated business model, comprising racing and racecourse entertainment, a membership club, responsible sports wagering and lottery, and charities and community contribution. Through this model, the Club generates economic and social value for the community and supports the HKSAR Government in combatting illegal gambling.\nThe Department\nThe objectives of the IT Risk & Controls Department are to establish and maintain a robust risk management methodology that effectively identifies, assesses, and mitigates risks related to IT processes and technology. The department ensures that the Club’s IT risk posture is accurately reported and that operations remain within the defined risk appetite, thereby enhancing operational integrity and resilience. By aligning its risk management approach with the Enterprise Risk Management Framework and the Technology Risk Management Framework, and by working closely with business units, the department promotes accountability and transparency across both IT and business functions.\nJob Summary\nAre you a senior technology risk professional who enjoys re-imagining how risk management supports modern engineering and operations? Do you thrive on tackling ambiguity, shaping frameworks, and helping technology leaders make better decisions in fast-moving environments?\nWe are looking for a Senior Technical Manager, IT Risk & Controls, to lead how technology risk is assessed, interpreted, and governed across the IT Division. This is not a traditional compliance role. You will act as a first-line risk leader, partnering closely with engineering, operations, data, and security teams to enable innovation without losing sight of performance, resilience, control, and accountability.\nIn this role, you will evolve the IT Risk Management Methodology from a framework into a living system -one that reflects modern delivery models, emerging technologies, and real operational signals. You will challenge legacy assumptions, introduce new ways of thinking about controls and indicators, and help senior leaders see risk management as an enabler for better decisions, not a barrier to progress.\nThe Job\nShape the Future of Technology Risk\nYou’ll lead the evolution of technology risk practices across the IT Division, ensuring risk and control assessments remain relevant for:\nCloud and platform-based architectures\nAgile, DevSecOps, and product-centric delivery models\nCyber, data, digital resilience, and emerging technology risks\n\nYou’ll guide teams away from static, checkbox-based controls and toward outcome-focused, risk-driven practices that scale with change.\nLead Control Assessment with Insight, Not Bureaucracy\nYou’ll manage and continuously refine the Technology Control Library, ensuring controls:\nClearly map to real risks and business impact\nAre proportionate, and fit for modern environments\nEnable Technology teams to deliver at pace and innovation rather than slow it down\n\nYou’ll design and maintain Key Risk Indicators (KRIs) that go beyond lagging compliance measures, drawing on operational and technical data to surface early warning signals for management.\nTurn Risk Data into Decision Intelligence\nYou’ll transform risk data into clear, compelling insights for senior leaders by:\nDeveloping IT risk posture dashboards that highlight trends, trade-offs, and decision points\nTranslating technical vulnerabilities into business outcomes and choices\nHelping management understand not just “what’s broken,” but what needs to change/improve and why\n\nDrive Learning from Incidents and Change\nYou’ll ensure incidents, near misses, and operational disruptions become learning opportunities, not just closure exercises, by:\n Analysing control weaknesses and contributing factors\nIdentifying systemic themes across incidents and changes\nDriving targeted control and design improvements that prevent recurrence\n\nInfluence, Enable, and Build Capability\nYou’ll act as a trusted advisor to senior IT leaders, using influence and credibility rather than authority. You’ll:\nSupport governance forums\nGuide teams through complex risk decisions in high-pressure delivery environments\nMentor and develop junior risk practitioners, growing the overall capability of the IT Risk and Control function\n\nAbout You\nBachelor's Degree (preferred) in a relevant discipline (e.g., Operational Risk Management, Information Security, IT Risk Management)\nProfessional risk management certification (e.g., ISO 31000, CISA, CRISC) and/or industry body affiliation is an advantage\n10+ years in technology or operational risk management\nProven track record designing, evolving, and leading technology risk frameworks and control assessment programmes\nStrong control assessment methodology background with a drive to modernise approaches\nExperience influencing outcomes in complex, matrixed environments\nDeep expertise in building and running operational risk management functions within IT organisations\nDeep understanding of technology risk, control design, and operational resilience\nFamiliarity with enterprise architecture, service management, asset management, change management, and system migrations\nKnowledge of industry best practices and trends in IT standards, governance, risk, and internal control\nExperience with GRC tooling and risk dashboards, viewed as insight platforms, not repositories\nCapable of assessing and quantifying technology and operational risks, evaluating mitigation measures, and providing practical recommendations\nTechnically astute with excellent analytical and decision-making ability\nAble to understand the Club's unique nature, culture, business strategies, and priorities as they relate to risk management\nExcellent written and verbal communication skills in English, including report writing\nStrong leadership with effective people and relationship management skills\nHigh influencing skills with the ability to engage stakeholders at all levels\nHigh professional and ethical standards\nProactive, with the ability to manage multiple tasks under pressure and with conflicting priorities\nYou are a curious, strategic, and pragmatic risk leader. You enjoy understanding how technology really works-and how it fails-and using that insight to design better controls and decision frameworks. You are comfortable navigating discussions about:\nArchitecture and system dependencies\nChange and release risk in Agile environments\nData governance, privacy, and ethical use of technology\nCyber and operational resilience trade offs\nYou are a translator and synthesiser: able to turn complexity into clarity, and uncertainty into informed action. Above all, you believe risk management should enable progress, not constrain it.\nApply Now!\nWe offer competitive salary and benefits packages, a dynamic working environment and development opportunities.\nAdd horsepower to your career today. Click the “Apply Now” button to create an account and submit your application.\nEqual Opportunity and Inclusive Hiring\nWe are an equal opportunity employer and strive to create an inclusive workplace for all. Applicants from diverse backgrounds are welcomed to apply. If you have any special needs or require accommodations during the interview process, please e-mail us via . Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and job applicants relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.","description_format":"text","description_chars":7669,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T07:54:44Z"}],"visa":[],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.756,"p_room":0.45,"age_days":27,"expected_fill_days":18,"reasons":["conf:15","velocity","win:tail","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/hkjc-senior-technical-manager-it-risk-and-controls","json_url":"https://alion.io/job/hkjc-senior-technical-manager-it-risk-and-controls.json","meta":{"generated_at":"2026-11-03T13:58:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19531,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2691383},"rest":"https://alion.io/mcp/rest/get_company?id=2691383"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhkjc-senior-technical-manager-it-risk-and-controls"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhkjc-senior-technical-manager-it-risk-and-controls"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhkjc-senior-technical-manager-it-risk-and-controls"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hkjc-senior-technical-manager-it-risk-and-controls\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhkjc-senior-technical-manager-it-risk-and-controls"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2600230}},{"tool":"search_jobs","arguments":{"company":"hkjc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2600230},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}