Cyber Governance & Risk Leader

Anglo-Eastern Ship Management

Hong Kong

On-site

HKD 900,000 - 1,300,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Anglo-Eastern Ship Management seeks a senior leader to own governance, risk and regulatory obligations across global maritime operations. Turn risk strategy into practical roadmaps, drive policy and standards, and align controls with ISO/IEC 27001, ISO 22301 and NIST CSF 2.0.

You will lead risk assessments across shore, vessel, cloud and OT, maintain the risk register, and report KRIs to senior management. Embed cybersecurity into safety management and run a third‑party programme with Legal and

Qualifications

Bachelor’s degree in information security, CS, engineering or risk management (or equivalent).
8–12 years of experience in cybersecurity GRC, information security governance, IT audit or security assurance with leadership responsibility.
Hands-on experience with ISO/IEC 27001, ISO 22301 and NIST CSF audits, evidence collection and remediation.

Responsibilities

Translate cyber and technology risk strategy into practical roadmaps, policies and standards.
Lead risk assessments across shore, vessel, cloud and OT environments; maintain risk register and KPI/KRI dashboards.
Maintain an obligations register covering maritime cyber requirements and regulations (Hong Kong PDPO, Singapore PDPA, NIS2).
Embed cybersecurity into safety management systems and vessel assurance with cross‑functional teams.
Run a risk‑based third‑party programme with Legal and Privacy, from due diligence to monitoring and exit.
Coordinate internal, external, certification and client audits end to end; handle security questionnaires and tenders.
Lead crisis management, business continuity and disaster recovery exercises; automate control monitoring.