Cybersecurity Manager

Accounting and Financial Reporting Council; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Benefits offered by this job

Learning and Development

Benefits and well‑being

Competitive package

Job summary

The Accounting and Financial Reporting Council in Hong Kong is seeking a senior cybersecurity professional to assess IT security, implement robust controls, and harden infrastructure across cloud and on‑premises environments.

Responsibilities include risk assessments, tool implementation, privileged access management, and collaboration with teams to safeguard systems and data while maintaining operational efficiency. A renewable contract is offered with a competitive package.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or related discipline.
• Holder of a recognised professional cybersecurity certification such as CISA, CISM, CISSP, CEH or OSCP.
• At least 5 years of relevant experience in IT security or cybersecurity.
• Hands‑on experience with IT infrastructure, networking and cloud platforms.
• Strong knowledge of IT general controls, cybersecurity risks and risk management.

Responsibilities

• Perform security risk assessments on IT systems and identify weaknesses.
• Develop and recommend solutions to mitigate identified security risks.
• Develop and maintain infrastructure hardening standards, including cloud platforms.
• Strengthen privileged account management and third‑party support processes.
• Lead the implementation of security tools to enhance the security posture.
• Ensure smooth IT operations and implement automation to improve efficiency.

Skills

Cybersecurity

Cloud security

Microsoft 365

Education

Bachelor’s degree in Cybersecurity

Tools

PAM

ZTNA

EDR

DLP

WAF

Job description

The Accounting and Financial Reporting Council (AFRC) is the independent regulator of the accounting profession in Hong Kong established under the AFRC Ordinance (Cap. 588). As an independent regulator, we spearhead and lead the accounting profession to constantly raise the level of quality of professional accountants, and thus protect the public interest. This pivotal role not only enhances the quality of financial reporting but in turn reinforces our pursuit of promoting the healthy development of the profession and Hong Kong’s position as a competitive international financial centre.

Responsibilities

• Perform security risk assessments on IT systems to identify security weaknesses and non‑compliance with the IT Reference Architecture and IT Security Control Matrix.
• Develop and recommend solutions to mitigate identified security risks.
• Develop and maintain infrastructure hardening standards, including standards for cloud platforms.
• Strengthen privileged account management and third‑party support management processes.
• Lead the implementation of security tools and solutions to enhance the overall infrastructure security posture.
• Ensure smooth IT operations and implement automation to improve operational efficiency and team productivity.
• Fulfil other responsibilities as assigned.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science or related discipline.
• Holder of a recognised professional cybersecurity certification, such as CISA, CISM, CISSP, CEH or OSCP.
• Possession of at least one cloud security certification such as CCSP, AWS Certified Security Specialty, or a relevant Microsoft Azure security certification.
• At least 5 years of relevant experience in IT security or cybersecurity.
• Hands‑on experience and strong knowledge of IT infrastructure and networking.
• Hands‑on experience in security assessment and implementation for Microsoft 365 and Microsoft Azure cloud platforms.
• Hands‑on experience with security tools and solutions, such as PAM, ZTNA, email security, EDR, DLP and WAF.
• Strong knowledge of IT general controls, cybersecurity risks, and technology risks including infrastructure, cloud and application security.
• Familiar with vulnerability management and cyber hygiene principles, as well as network and web application security testing methodologies and techniques.
• Strong analytical and problem‑solving skills, with excellent communication and interpersonal skills and the ability to work effectively as part of a team. Project Management experience is beneficial.
• Good command of both written and spoken English and Chinese, including Cantonese and Mandarin.
• This is a renewable contract role. A competitive package will be offered to the successful candidate.

Data held by the AFRC relating to employment applications will be kept confidential and used for recruitment purposes only. Applicants who are not contacted within six weeks may consider their applications unsuccessful. The AFRC will retain their applications for a maximum of one year.

Unlock job insights

Hirer responsiveness Salary match Number of applicants

Your application will include the following questions:

• Which of the following statements best describes your right to work in Hong Kong?
• What's your expected monthly basic salary?
• How many years of experience do you have in the Cybersecurity Industry?

Perks and benefits

• Learning and Development
• Benefits, Rewards and Employee Well-being
• Shared Values

Accounting and Financial Reporting Council (AFRC) is the independent regulator of the accounting profession in Hong Kong. Our mission is to shape a competitive environment that will nurture and promote success of the profession. This pivotal role not only enhances the quality of financial reporting but in turn reinforces our pursuit of promoting the healthy development of the profession and Hong Kong’s position as a competitive international financial centre.