Senior Technology Risk Analyst / Lead

lalamove· Information Security (Infosec)
Apply Now ↗
📍 Hong Kong SARFull time

About this role

At Lalamove, we believe in the power of community. Millions of drivers and customers use our technology every day to connect with one another and move things that matter. Delivery is what we do best and we ensure it is always fast and simple. Since 2013, we have tackled the logistics industry head on to find the most innovative solutions for the world’s delivery needs. We are full steam ahead to make Lalamove synonymous with delivery and on a mission to impact as many local communities we can. We have massively scaled our efforts across Asia and now have our sights on taking our best in class technology to the rest of the world. And we are looking for talented professionals to join us in this journey!
We are seeking an experienced Senior Network and Security Analyst/Lead to deploy, optimize, and maintain robust cybersecurity solutions and network infrastructure across our enterprise environment. In this role, you will lead vulnerability management operations, strengthen defense and incident response capabilities, and ensure network security systems are optimized to mitigate risks.

What you will do:

  • Risk Assessment & Tracking: Maintain the enterprise risk register and conduct comprehensive risk assessments across IT infrastructure, cloud environments, and the System Development Life Cycle (SDLC) for various organizational projects and technical assets.
  • Remediation Coordination: Coordinate risk remediation plans across different teams and meticulously track risk acceptance decisions.
  • Reporting & Visibility: Develop and maintain risk dashboards, generating clear, high-level executive summaries for management review.
  • Emerging Tech Governance: Champion and drive AI security governance initiatives to ensure the safe and compliant adoption of artificial intelligence technologies
  • Audit & Compliance: Actively support internal audit initiatives and facilitate robust security control testing. Maintain and continuously improve the Information Security Management System (ISMS) in compliance with ISO 27001 standards. Conduct regular PCI DSS assessments.

What you will need:

  • Education: Bachelor’s degree in Cybersecurity, Information Technology, Risk Management, Business Administration, or a related field.
  • Experience: 5+ years of experience in IT Risk Management, Information Security, Compliance, or IT Audit.
  • Technical Skills:
  • Strong understanding of risk assessment methodologies and frameworks (e.g., NIST CSF, ISO 27001, PCI DSS).
  • Experience maintaining risk registers and tracking remediation lifecycles.
  • Solid knowledge of IT infrastructure (networks, databases, cloud architecture) and secure system development practices (e.g., DevSecOps, CI/CD pipelines, secure architecture) to accurately identify and evaluate technical vulnerabilities.
  • Familiarity with privacy regulations and emerging AI governance standards.
  • Soft Skills: Exceptional communication skills with the ability to translate complex technical risks into business terms for management and stakeholders.
  • Certifications (Preferred): CRISC, CISA, CISM, ISO 27001 Lead Auditor or similar industry-recognized risk and audit certifications.
To all candidates- Lalamove respects your privacy and is committed to protecting your personal data.
This Notice will inform you how we will use your personal data, explain your privacy rights and the protection you have by the law when you apply to join us. Please take time to read and understand this Notice. Candidate Privacy Notice: https://www.lalamove.com/en-hk/candidate-privacy-notice

Frequently Asked Questions

Is the salary disclosed for the Senior Technology Risk Analyst / Lead position at lalamove?
The salary for this Senior Technology Risk Analyst / Lead role at lalamove is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Senior Technology Risk Analyst / Lead position at lalamove located?
This Senior Technology Risk Analyst / Lead role at lalamove is based in Hong Kong SAR. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Senior Technology Risk Analyst / Lead role at lalamove full-time or part-time?
This is listed as a Full time position. It is posted as a Senior Technology Risk Analyst / Lead role in the Information Security (Infosec) department at lalamove.
Which team or department does the Senior Technology Risk Analyst / Lead at lalamove belong to?
This Senior Technology Risk Analyst / Lead position is part of the Information Security (Infosec) department at lalamove. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Senior Technology Risk Analyst / Lead position at lalamove?
Click the "Apply Now" button on this page. You will be redirected to lalamove's official application portal hosted on lever where you can submit your application directly.
When was the Senior Technology Risk Analyst / Lead job at lalamove posted?
This Senior Technology Risk Analyst / Lead position at lalamove was posted on Sep 25, 2026. Apply as soon as possible — early applications are often reviewed first.
Senior Technology Risk Analyst / Lead
lalamove
Apply for this role ↗

You'll be redirected to lalamove's official application page on Lever.