Cybersecurity Governance & Risk Manager

Randstad Hong Kong Limited; Hong Kong; On-site; HKD 800,000 - 1,500,000; Full time

Job summary

Randstad Hong Kong Limited is seeking an experienced Cybersecurity Governance & Risk Manager to safeguard enterprise technology and critical infrastructure from Hong Kong. You will drive governance standards, risk evaluations, and incident response across IT/OT environments, partnering with cross-functional teams to ensure robust security controls.

The role requires 6+ years in information security, governance and risk, with credentials like CISSP/CISM/CISA/CRISC highly valued.

Qualifications

• Minimum 6 years of solid experience spanning information security, security operations, and governance/project management.
• Bachelor's or Master's degree in Computer Science, Information Security, or a related discipline.
• Professional security credentials (e.g., CISSP, CISM, CISA, CRISC) are strongly preferred.
• Deep understanding of information security risk management frameworks and industry standards (e.g., NIST, ITIL).
• Practical familiarity with both IT and OT operational environments.
• Excellent command of spoken and written English; proficiency in Mandarin is a distinct advantage.

Responsibilities

• Formulate, maintain, and enforce enterprise cybersecurity governance standards, compliance policies, and operational guidelines.
• Lead structured cybersecurity risk evaluations across diverse operational entities and tech platforms.
• Monitor IT/OT risk exposures and collaborate with system and infrastructure owners to deploy effective mitigating security controls.
• Evaluate global threat intelligence streams to recommend proactive security enhancements and control upgrades.
• Oversee cyber incident response protocols and coordinate crisis simulation drills to minimize potential risk exposure and business disruption.
• Drive corporate cybersecurity training and awareness programs to cultivate a strong security culture across all business functions.

Skills

Cybersecurity governance

Risk management

Security operations

Project management

English communication

Education

Bachelor's or Master's degree in Computer Science / Information Security

Job description

about the company.

Our client is a prominent, international aviation services group headquartered in Hong Kong. Delivering high-quality maintenance, repair, and technical engineering solutions globally, the organization plays a critical role in supporting safe and efficient aircraft operations across the Asia-Pacific region, the Americas, and international markets. Based in a key operational facility near Hong Kong International Airport (HKIA), they are currently seeking an experienced Cybersecurity Governance & Risk Manager to safeguard their enterprise technology systems and critical infrastructure.

about the team.

You will join a dynamic, highly specialized technology team dedicated to maintaining elite security standards across complex operational environments. Working alongside cross-functional partners in application, infrastructure, and business unit operations, you will operate in a supportive and professional environment focused on continuous security improvement and enterprise-wide resilience.

about the job.

• Formulate, maintain, and enforce enterprise cybersecurity governance standards, compliance policies, and operational guidelines.

• Lead structured cybersecurity risk evaluations across diverse operational entities and tech platforms.

• Monitor IT/OT risk exposures and collaborate with system and infrastructure owners to deploy effective mitigating security controls.

• Evaluate global threat intelligence streams to recommend proactive security enhancements and control upgrades.

• Oversee cyber incident response protocols and coordinate crisis simulation drills to minimize potential risk exposure and business disruption.

• Drive corporate cybersecurity training and awareness programs to cultivate a strong security culture across all business functions.

skills & experience required.

• Minimum 6 years of solid experience spanning information security, security operations, and governance/project management.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related discipline.

• Professional security credentials (e.g., CISSP, CISM, CISA, CRISC) are strongly preferred.

• Deep understanding of information security risk management frameworks and industry standards (e.g., NIST, ITIL).

• Practical familiarity with both IT and OT operational environments.

• Excellent command of spoken and written English; proficiency in Mandarin is a distinct advantage.

experience

7 years

skills

no additional skills required

qualifications

no additional qualifications required

education

Bachelor Degree