Cybersecurity Manager (GRC & SOC) - Tier 1 FSI

Links International; Hong Kong Island; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Links International is seeking a Cybersecurity Manager (GRC & SOC) to lead the organization's security strategy in Hong Kong's regulated environment. You will drive cyber risk management, oversee SOC operations, and coordinate resilience initiatives with cross-functional teams.

The role requires 6+ years of experience, strong knowledge of standards such as ISO 27001 and CSA STAR, and the ability to communicate with stakeholders in English and Chinese.

Qualifications

• Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
• 6+ years of experience in cybersecurity, technology risk management, security governance, or IT audit.
• Experience operating SOC, cyber threat intelligence, incident response, or cyber resilience programs.
• Knowledge of ISO 27001, CSA STAR, cyber resilience frameworks, and regulatory security guidelines.
• Certifications such as CISSP, CISM, CISA, CRISC, CEH, CCSP, OSCP, GPEN, GCTI, or equivalents are highly desirable.
• Fluent in English and Chinese.

Responsibilities

• Manage and enhance the organization's cybersecurity posture and cyber resilience capabilities.
• Develop and implement cyber resilience strategies, controls, and improvement initiatives aligned with industry best practices.
• Establish and maintain cyber threat intelligence processes covering threat collection, analysis, and dissemination.
• Lead cyber resilience assessments, security reviews, and security-related projects.
• Manage Security Operations Center (SOC) activities and coordinate cyber incident response efforts.
• Provide cybersecurity advisory support for infrastructure and application projects, including security architecture reviews.
• Drive remediation initiatives arising from risk assessments, audits, security incidents, and emerging threats.
• Support cyber risk reporting, security budgeting, regulatory engagements, and audit activities.
• Coordinate cyber attack simulation exercises and resilience testing programs with internal and external stakeholders.

Skills

Analytical thinking

Problem-solving

Stakeholder management

Communication skills

Bilingual English/Chinese

Education

Bachelor's degree in Cybersecurity / IT

Job description

Cybersecurity Manager (GRC & SOC) - Tier 1 FSI

Our client is a leading organization operating critical digital platforms and technology services within a highly regulated environment. As part of its continued investment in cybersecurity and operational resilience, the company is looking for an experienced cybersecurity professional to help drive security strategy, resilience initiatives, and cyber risk management programs.

Responsibilities:

• Manage and enhance the organization's cybersecurity posture and cyber resilience capabilities.


• Develop and implement cyber resilience strategies, controls, and improvement initiatives aligned with industry best practices.


• Establish and maintain cyber threat intelligence processes covering threat collection, analysis, and dissemination.


• Lead cyber resilience assessments, security reviews, and security-related projects.


• Manage Security Operations Center (SOC) activities and coordinate cyber incident response efforts.


• Provide cybersecurity advisory support for infrastructure and application projects, including security architecture reviews.


• Drive remediation initiatives arising from risk assessments, audits, security incidents, and emerging threats.


• Support cyber risk reporting, security budgeting, regulatory engagements, and audit activities.


• Coordinate cyber attack simulation exercises and resilience testing programs with internal and external stakeholders.

Requirements:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.


• Minimum 6 years of experience in cybersecurity, technology risk management, security governance, or IT audit. Strong understanding of cybersecurity frameworks, technology risk management, cyber resilience, and security best practices.


• Experience operating or supporting SOC, cyber threat intelligence, incident response, or cyber resilience programs.


• Knowledge of cybersecurity technologies, data privacy, FinTech, AI-related risks, and emerging security trends.


• Familiarity with industry standards and frameworks such as ISO 27001, CSA STAR, cyber resilience frameworks, and regulatory security guidelines.


• Relevant certifications such as CISSP, CISM, CISA, CRISC, CEH, CCSP, OSCP, GPEN, GCTI, or equivalent are highly desirable.


• Strong analytical, problem-solving, stakeholder management, and communication skills.


• Fluent in both English and Chinese.