Assistant Vice President, Cybersecurity

Randstad Hong Kong Limited; Hong Kong; On-site; HKD 1,100,000 - 1,800,000; Full time

Job summary

Randstad Hong Kong Limited/external client seeks an AVP IT Security to safeguard the enterprise. You will oversee security controls, vulnerability initiatives, and incident response while aligning with HKMA guidelines.

You will lead regulatory reviews, formulate security policies, and manage daily operations of enterprise security systems, driving a security-first culture across units.

Qualifications

• Degree in Information Technology, Cybersecurity, or a related discipline.
• 8+ years IT experience, with at least 5 years focused on cybersecurity and risk governance.
• Banking or financial services background with knowledge of HKMA guidelines.
• Hands-on experience with enterprise security tools and hardening projects.
• Certifications like CISA, CISM, CISSP or HKMA ECF-C preferred.
• Excellent analytical, communication and problem-solving skills; fluent in English and Cantonese; Mandarin a plus.

Responsibilities

• Regulatory Compliance: Lead security reviews to validate control effectiveness.
• Policy Governance: Formulate, refine, and enforce global cybersecurity policies.
• System Operations: Oversee deployment, maintenance, and daily operations of security systems.
• Vulnerability & Threat Management: Direct hardening programs and track threat trends.
• Incident Response: Manage end-to-end cyber incident resolution, reporting and analysis.
• Security Awareness: Drive firm-wide security training and promote a security-first culture.

Skills

Regulatory compliance

Policy governance

Security tools management

Vulnerability & threat management

Incident response

Security awareness

Analytical communication

Education

Degree in IT/Cybersecurity

Job description

Our client is a prominent financial organization in Hong Kong. To support their expanding digital infrastructure, they are seeking a high-caliber Assistant Vice President to join their dedicated IT Security team.

About the Role

Reporting directly to the Head of Cybersecurity, you will play a critical role in safeguarding the enterprise environment. You will oversee the execution of security controls, manage vulnerability initiatives, align policies with regional standards, and spearhead cyber incident response efforts.

Key Responsibilities

• Regulatory Compliance: Lead Head Office, regional, and HKMA regulatory security reviews to validate control effectiveness.
• Policy Governance: Formulate, refine, and enforce global cybersecurity policies and operational standards.
• System Operations: Oversee the deployment, maintenance, and daily operations of enterprise security systems.
• Vulnerability & Threat Management: Direct system hardening programs, track threat intelligence trends, and proactively mitigate emerging risks.
• Incident Response: Manage end-to-end cyber incident resolution, reporting, and post-event analysis.
• Security Awareness: Drive firm-wide security training and promote a strong security-first culture across business units.

Skills & Qualifications Required

• Degree in Information Technology, Cybersecurity, or a related discipline.
• Minimum 8 years of IT experience, including at least 5 years focused on cybersecurity and risk governance.
• Proven track record in banking or financial services, with strong familiarity with HKMA cybersecurity and technology risk guidelines.
• Hands-on expertise in managing enterprise security tools and driving hardening projects.
• Relevant professional certifications (CISA, CISM, CISSP, or equivalent HKMA ECF-C qualifications) are strongly preferred.
• Excellent analytical, communication, and problem-solving skills; fluent in English and Cantonese (Mandarin is a plus).