Cyber Security Ops Lead — Risk & Compliance Advisory

Galaxy Entertainment Group; Hong Kong; Vor Ort; HKD 420.000 - 680.000; Vollzeit

Zusammenfassung

Galaxy Entertainment Group seeks a cyber security Subject Matter Expert and Advisor to lead enterprise-wide risk assessments, vulnerability management, and security governance across the organization in Hong Kong. The role involves risk analysis, remediation planning, and collaboration with IT and business teams.

Responsibilities include security reviews of new systems and cloud services, audits support, and driving secure design practices.

Qualifikationen

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent).
• 4+ years in: cybersecurity risk assessment, vulnerability management, security compliance or audit support.
• Hands-on with vulnerability scanning/remediation and frameworks (ISO 27001, NIST CSF, MCSL).
• Ability to perform risk impact analysis and remediation planning; communicate risks to stakeholders.
• Fluent in English and Chinese (reading/writing).

Aufgaben

• Contribute as SME and advisor for enterprise-wide cybersecurity risk assessments.
• Perform cyber, tech and business impact and risk analysis; develop remediation plans.
• Support vulnerability identification, prioritization, and remediation tracking.
• Ensure compliance with ISO 27001, NIST CSF, PCI-DSS; support audits and policy reviews.
• Assess security of new systems/cloud services; provide secure design recommendations.
• Design social engineering simulations and contribute to cybersecurity awareness.

Kenntnisse

Risk assessment

Vulnerability management

Security compliance

Audit support

Security frameworks

Cloud security

Stakeholder communication

English & Chinese communication

Ausbildung

Bachelor's degree in Computer Science or Cybersecurity

Jobbeschreibung

Galaxy Entertainment Group seeks a cyber security Subject Matter Expert and Advisor to lead enterprise-wide risk assessments, vulnerability management, and security governance across the organization in Hong Kong. The role involves risk analysis, remediation planning, and collaboration with IT and business teams.

Responsibilities include security reviews of new systems and cloud services, audits support, and driving secure design practices.