AVP Cybersecurity: Compliance & Incident Response

Randstad Hong Kong Limited; Hong Kong; On-site; HKD 1,100,000 - 1,800,000; Full time

Job summary

Randstad Hong Kong Limited/external client seeks an AVP IT Security to safeguard the enterprise. You will oversee security controls, vulnerability initiatives, and incident response while aligning with HKMA guidelines.

You will lead regulatory reviews, formulate security policies, and manage daily operations of enterprise security systems, driving a security-first culture across units.

Qualifications

• Degree in Information Technology, Cybersecurity, or a related discipline.
• 8+ years IT experience, with at least 5 years focused on cybersecurity and risk governance.
• Banking or financial services background with knowledge of HKMA guidelines.
• Hands-on experience with enterprise security tools and hardening projects.
• Certifications like CISA, CISM, CISSP or HKMA ECF-C preferred.
• Excellent analytical, communication and problem-solving skills; fluent in English and Cantonese; Mandarin a plus.

Responsibilities

• Regulatory Compliance: Lead security reviews to validate control effectiveness.
• Policy Governance: Formulate, refine, and enforce global cybersecurity policies.
• System Operations: Oversee deployment, maintenance, and daily operations of security systems.
• Vulnerability & Threat Management: Direct hardening programs and track threat trends.
• Incident Response: Manage end-to-end cyber incident resolution, reporting and analysis.
• Security Awareness: Drive firm-wide security training and promote a security-first culture.

Skills

Regulatory compliance

Policy governance

Security tools management

Vulnerability & threat management

Incident response

Security awareness

Analytical communication

Education

Degree in IT/Cybersecurity

Job description

Randstad Hong Kong Limited/external client seeks an AVP IT Security to safeguard the enterprise. You will oversee security controls, vulnerability initiatives, and incident response while aligning with HKMA guidelines.

You will lead regulatory reviews, formulate security policies, and manage daily operations of enterprise security systems, driving a security-first culture across units.