Senior Technical Manager, IT Risk and Controls

The Hong Kong Jockey Club

Founded in 1884, The Hong Kong Jockey Club ("the Club") is a world-class horse sports and entertainment organisation that acts continuously for the betterment of our society. The Club has a unique value creation model, through which the Club generates sustainable economic and social value for the benefit of the community and supports the HKSAR Government in combatting illegal gambling.  The Club is Hong Kong’s largest single taxpayer and one of the city’s major employers. Its Charities Trust is one of the world’s leading charity donors.

Who are we?

We are the IT Division of HKJC, a vibrant community of over 1,500 dedicated professionals working collaboratively across Hong Kong and Shenzhen.

Our team is a diverse mix of individuals from various backgrounds, from all across the world. We embrace our humanity, recognizing that each of us brings unique strengths and perspectives. This diversity not only enriches our work environment but also drives our innovation and creativity as we strive to achieve our collective goals.

What do we do?

We design, build, and operate the technology that powers the Club. Our primary focus is on delivering the service that supports our hospitality, racing and wagering operations, to ensure that our customers and members enjoy exceptional experiences.

We also deliver the changes necessary to drive business growth through new products and services. And, we are committed to safeguarding the Club by protecting it from external threats, providing a secure and resilient technological environment.

The Department

The objectives of the IT Risk & Controls Department are to establish and maintain a robust risk management methodology that effectively identifies, assesses, and mitigates risks related to IT processes and technology. The department ensures that the Club’s IT risk posture is accurately reported and that operations remain within the defined risk appetite, thereby enhancing operational integrity and resilience. By aligning its risk management approach with the Enterprise Risk Management Framework and the Technology Risk Management Framework, and by working closely with business units, the department promotes accountability and transparency across both IT and business functions.

The Job

• Lead the evolution of technology risk practices across the IT function, ensuring they remain relevant to modern environments such as cloud architectures, agile delivery models, DevSecOps, and emerging cyber and resilience risks. Drive a shift from static, checklist-driven controls to adaptive, outcome-focused approaches that support speed, scalability, and innovation
• Oversee and continuously improve the Technology Control Library, ensuring controls are risk-aligned, proportionate, and practical for today’s technology landscape. Design and maintain forward-looking Key Risk Indicators (KRIs) that leverage operational and technical data to provide early warning signals, moving beyond traditional compliance metrics
• Transform risk data into actionable decision intelligence by developing clear risk dashboards, highlighting trends and trade-offs, and translating technical issues into meaningful business insights. Enable senior leadership to make informed decisions by focusing on what matters, why it matters, and what needs to change
• Promote a culture of continuous learning by turning incidents, near-misses, and disruptions into opportunities for improvement. Identify root causes, systemic themes, and control weaknesses, and drive targeted enhancements to prevent recurrence
• Act as a trusted advisor to senior IT stakeholders, influencing through expertise and credibility. Support governance processes, guide teams through complex risk decisions in fast-paced environments, and build organisational capability by mentoring and developing risk professionals

About You

• Bachelor's Degree (preferred) in a relevant discipline (e.g., Operational Risk Management, Information Security, IT Risk Management)
• Professional risk management certification (e.g., ISO 31000, CISA, CRISC) and/or industry body affiliation is an advantage
• An experienced technology and operational risk professional with over 10 years of expertise in designing, implementing, and leading technology risk frameworks and control assessment programmes. Possesses a strong background in control assessment methodologies, with a focus on modernising approaches and driving continuous improvement
• Demonstrates deep knowledge of technology risk, control design, and operational resilience, along with hands-on experience building and managing operational risk functions within IT organisations. Well-versed in enterprise architecture, service management, asset management, change management, and system migrations
• Brings strong awareness of industry best practices in IT governance, risk, and internal controls, supported by experience using GRC tools and dashboards as strategic insight platforms rather than static repositories. Skilled in assessing and quantifying risks, evaluating mitigation strategies, and delivering practical, business-aligned recommendations
• A technically astute and analytical decision-maker who can operate effectively in complex, matrixed environments, influencing stakeholders at all levels. Combines strong leadership, relationship management, and communication skills with high ethical standards and professionalism
• Proactive and adaptable, with the ability to manage multiple priorities under pressure, while aligning risk management practices with organisational culture, strategy, and business objectives

Apply Now!

We offer competitive salary and benefits packages, a dynamic working environment and development opportunities.

Add horsepower to your career today. Click the “Apply Now” button to create an account and submit your application.

Equal Opportunity and Inclusive Hiring

We are an equal opportunity employer and strive to create an inclusive workplace for all. Applicants from diverse backgrounds are welcomed to apply. If you have any special needs or require accommodations during the interview process, please e-mail us via careers@hkjc.org.hk. Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and job applicants relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.