Cyber Security Ops & Risk Assessment Lead

Galaxy Entertainment Group; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

Galaxy Entertainment Group in Hong Kong is seeking a Cyber Security Subject Matter Expert to lead enterprise risk assessments, vulnerability management, and governance; advising on secure design for new systems and cloud services. You will drive risk remediation plans and support audits, with strong stakeholder engagement across IT and business units.

The role requires 4+ years in cybersecurity, proficiency in English and Chinese, and hands-on experience with vulnerability management and

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
• 4+ years in cybersecurity risk assessment, vulnerability management, and security compliance or audit support
• Hands-on experience with vulnerability scanning and remediation processes
• Solid understanding of frameworks and standards (ISO 27001, NIST CSF, MCSL)
• Proven ability to communicate security risks to non-technical stakeholders
• Bilingual English and Chinese, including writing and reading

Responsibilities

• Conduct enterprise-wide cybersecurity risk assessments
• Perform cyber, tech and business impact and risk analysis
• Develop risk treatment and remediation plans
• Support vulnerability identification and remediation tracking
• Ensure compliance with frameworks (ISO 27001, NIST CSF, PCI-DSS) and assist audits
• Provide security assessments on new systems and cloud services
• Design and implement security awareness initiatives and simulations
• Collaborate with IT and business teams to align risk treatment and communicate risks to stakeholders

Skills

Strong communication

English and Chinese

Analytical thinking

Stakeholder engagement

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Vulnerability scanning tools

Threat intelligence

Job description

Galaxy Entertainment Group in Hong Kong is seeking a Cyber Security Subject Matter Expert to lead enterprise risk assessments, vulnerability management, and governance; advising on secure design for new systems and cloud services. You will drive risk remediation plans and support audits, with strong stakeholder engagement across IT and business units.

The role requires 4+ years in cybersecurity, proficiency in English and Chinese, and hands-on experience with vulnerability management and