AVP – Cybersecurity (IT Security Group)

ALL-STAR AGENCY; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

ALL-STAR AGENCY in Hong Kong is seeking an AVP - Cybersecurity to strengthen the bank’s cyber defence posture and ensure security controls meet regulatory and group standards. You will lead security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small specialist team.

The role requires a degree in IT/cybersecurity and 8+ years in IT with 5+ in cybersecurity, with English and Cantonese fluency; Mandarin

Qualifications

• Degree in IT, Cybersecurity or related discipline.
• 8+ years in IT, including 5+ years in cybersecurity or IT risk management.
• Hands-on in security assessments and implementing/operating security controls.
• Banking experience and HKMA guidelines familiarity preferred.
• Certifications such as CISA, CISM, CISSP or HKMA-recognised are a plus.
• Independent worker with strong communication, analytical and problem-solving skills.
• Fluent in English and Cantonese; Mandarin desirable.

Responsibilities

• Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are documented and tested.
• Develop, maintain and update cybersecurity policies, standards and guidelines aligning with group and local regulatory expectations (HKMA).
• Oversee implementation and day-to-day operation of security technologies and controls with infrastructure and application teams.
• Plan, drive and track security hardening and vulnerability management activities, including remediation and reporting to management.
• Promote cybersecurity awareness and a strong security culture across the organisation through communication and training.
• Monitor cyber threat intelligence and support incident management, response and reporting for cyber events.

Skills

Security assessments

Vulnerability management

Incident response

Policy design

Communication

Analytical thinking

Education

Degree in IT/Cybersecurity

Job description

Join the Security & Architecture Group in Hong Kong as AVP - Cybersecurity (IT Security Group), helping to strengthen the bank’s cyber defence posture and ensure security controls meet regulatory and group standards. You will play a key role in security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small, specialist cybersecurity team.

Key Responsibilities

• Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are properly documented, tested and improved where necessary.
• Develop, maintain and update cybersecurity policies, standards and guidelines, aligning them with group requirements and local regulatory expectations (e.g. HKMA).
• Oversee the implementation and day-to-day operation of security technologies and controls, working with infrastructure and application teams to ensure effective protection.
• Plan, drive and track security hardening and vulnerability management activities, including remediation follow-up and reporting to management.
• Promote cybersecurity awareness and a strong security culture across the organisation through communication, training and engagement initiatives.
• Monitor cyber threat intelligence, market trends and emerging risks, and support incident management, response and reporting for cyber events.

Requirements

• Degree in IT, Cybersecurity or a related discipline.
• Minimum 8 years’ experience in the IT industry, including at least 5 years in cybersecurity and/or IT risk management.
• Hands-on experience supporting security assessments and implementing or operating security systems and controls.
• Banking experience and familiarity with HKMA cybersecurity and technology-risk guidelines are preferred.
• Professional qualifications such as CISA, CISM, CISSP or HKMA ECF-C-recognised certifications are an advantage.
• Able to work independently with strong communication, analytical and problem-solving skills.
• Fluent in English and Cantonese; Mandarin would be an added advantage.