Join our team to innovate in risk mitigation, leveraging your skills in a fast-paced, impactful environment.

As a Tech Risk & Controls Associate in Cybersecurity & Tech Controls, you will be a part of a team that supports the implementation of risk mitigation strategies, controls and action plans for the firm. Working closely with the technology risk teams and cross-functional partners, you contribute your skills and insights to the continuous improvement of risk management methods. As a valued member of the team, you will have the opportunity to learn and grow in a dynamic and fast-paced environment, making a tangible impact on technology risk and controls at the firm.

Job responsibilities

Assist in monitoring technology risks, ensuring compliance with firm standards, regulatory requirements, and industry best practices Collaborate with stakeholders to develop and implement risk mitigation strategies, controls, and action plans for technology-aligned processes Monitor and evaluate the effectiveness of implemented controls, contribute to the recommendations for improvements and addressing gaps in risk management Communicate risk-related findings and updates to relevant stakeholders, ensuring alignment with organizational objectives and risk appetite 

Required qualifications, capabilities, and skills

2+ years of experience or equivalent expertise in technology risk management, information security, or a related field Proficient in risk identification, assessment, and control evaluation, with a strong understanding of industry standards Demonstrated ability to analyze complex issues, develop risk mitigation strategies, and communicate effectively with stakeholders Exposure to risk management frameworks, regulations, and industry best practices  Require fluency in Chinese language (including reading and conversation) to work with Chinese stakeholders. Advise on responding audit or regulator RFIs.

Preferred qualifications, capabilities, and skills

CISM, CRISC, CISSP, or other industry-recognized risk certifications Understanding of China Futures and Options Regulations (e.g., regulations issued by CSRC or CFA) would be a plus