Cybersecurity GRC Manager: Risk, Compliance & Assurance

Anglo-Eastern Ship Management Limited; Hong Kong; On-site; HKD 900,000 - 1,100,000; Full time

Job summary

Anglo-Eastern Ship Management Limited in Hong Kong is seeking a Manager, Cybersecurity Governance & Risk to translate the group’s cyber risk strategy into actionable policies and controls, aligned to ISO/IEC standards and NIST CSF 2.0. The role leads risk assessments across shore, vessel, cloud, and OT environments and reports KRIs to senior management.

You will maintain an obligations register covering maritime cyber requirements and collaborate with Legal, Privacy, and IT to embed security

Qualifications

• Bachelor’s degree or equivalent in information security, CS, engineering, or risk management.
• 8–12 years of experience in cybersecurity GRC and governance with leadership responsibility.
• Hands-on experience with ISO/IEC 27001, ISO 22301, and NIST CSF 2.0, including audits and remediation.

Responsibilities

• Translate risk strategy into practical roadmaps, policies, and standards aligned to ISO/NIST frameworks.
• Lead risk assessments across shore, vessel, cloud, and OT environments and report KRIs/KPIs.
• Maintain and oversee an obligations register for maritime cyber requirements and regulations.
• Embed cybersecurity into safety management and collaborate with QHSE, Fleet, and IT.
• Lead third-party risk programmes from due diligence to monitoring and exit.

Skills

Leadership

Governance

Regulatory compliance

English communication

Risk management

Education

Bachelor’s degree in information security, CS, Engineering, or Risk Management

Tools

ISO/IEC 27001

ISO 22301

NIST CSF 2.0

GRC tooling

Job description

Anglo-Eastern Ship Management Limited in Hong Kong is seeking a Manager, Cybersecurity Governance & Risk to translate the group’s cyber risk strategy into actionable policies and controls, aligned to ISO/IEC standards and NIST CSF 2.0. The role leads risk assessments across shore, vessel, cloud, and OT environments and reports KRIs to senior management.

You will maintain an obligations register covering maritime cyber requirements and collaborate with Legal, Privacy, and IT to embed security