(Assistant) Manager - Cybersecurity (Perm, Inhouse, 1-1.5 LoD)

Morgan Mckinley Limited; Hong Kong Island; On-site; HKD 800,000 - 1,200,000; Full time

Job summary

Morgan Mckinley Limited in Hong Kong is seeking an (Assistant) Manager - Cybersecurity to maintain, monitor, and advance the organization’s security posture. You will lead real-time threat intelligence, translate IoCs into detection rules, and advance policies and configurations across cloud, hybrid, and on-premise environments.

The role requires 6–8 years in IT security or risk management with experience in security assessments, and familiarity with ISO/IEC 27001, NIST CSF, CIS Controls, and

Qualifications

• 6-8 years of progressive experience in IT security, cybersecurity operations, or tech risk management, with explicit focus on 1st or 1.5 Line of Defense functions.
• Experience in supporting security assessment and security systems implementation
• Deep familiarity with security frameworks and standards (ISO/IEC 27001, NIST CSF, CIS Controls, SOC 2).
• With CISSP, CISM, or CISA would be preferred.

Responsibilities

• Lead real-time threat intelligence ingestion, analysis, and dissemination to proactively identify cyber risks targeting the organization.
• Translate threat feeds and indicators of compromise (IoCs) into actionable SIEM/EDR detection rules and preventive control enhancements.
• Author, review, and operationalize cybersecurity policies, technical standards, and baseline security configurations (e.g., CIS benchmarks, NIST Cybersecurity Framework).
• Establish, document, and test key security controls across cloud, hybrid, and on-premise environments.
• Promote security awareness and best practices across cross-functional engineering, development, and business units.

Skills

Threat intelligence

SIEM/EDR rules

Security frameworks

ISO 27001

NIST CSF

CIS Controls

SOC 2

CISSP

CISM

CISA

Analytical skills

Technical writing

Stakeholder communication

Job description

(Assistant) Manager - Cybersecurity (Perm, Inhouse, 1-1.5 LoD)

The hiring company is looking for (Assistant) Manager - Cybersecurity to maintain, monitor, and advance the security posture.

Key Responsibilities:

• Lead real-time threat intelligence ingestion, analysis, and dissemination to proactively identify cyber risks targeting the organization.
• Translate threat feeds and indicators of compromise (IoCs) into actionable SIEM/EDR detection rules and preventive control enhancements.
• Author, review, and operationalize cybersecurity policies, technical standards, and baseline security configurations (e.g., CIS benchmarks, NIST Cybersecurity Framework).
• Establish, document, and test key security controls across cloud, hybrid, and on-premise environments.
• Promote security awareness and best practices across cross-functional engineering, development, and business units.

Requirements:

• 6-8 years of progressive experience in IT security, cybersecurity operations, or tech risk management, with explicit focus on 1st or 1.5 Line of Defense functions.
• Experience in supporting security assessment and security systems implementation
• Deep familiarity with security frameworks and standards (ISO/IEC 27001, NIST CSF, CIS Controls, SOC 2).
• With CISSP, CISM, or CISA would be preferred.
• Excellent analytical, communication, and technical writing skills with the ability to bridge technical jargon for risk stakeholders.