Cybersecurity Manager/ Information Security Manager (Banking)

JustOneGalaxy Recruitment Limited; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Benefits offered by this job

Health insurance

Job summary

JustOneGalaxy Recruitment Limited seeks a Cybersecurity Manager/Information Security Manager for a banking client. The role oversees infrastructure and endpoint security, ensures regulatory compliance, and provides strategic security guidance across cross-functional initiatives.

You will work with cross-departmental teams, applying hands-on expertise in EDR/XDR, DLP, and cloud security, while aligning with HKMA guidelines and ISO standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, IT, or a related field.
• 5+ years in cybersecurity, infrastructure security, or operations.
• Banking/financial services experience preferred.
• Hands-on familiarity with EDR/XDR, endpoint protection, DLP, network/cloud security, security architecture.

Responsibilities

• Oversee infrastructure and endpoint security.
• Ensure regulatory compliance across projects.
• Evaluate security solutions and provide strategic guidance.
• Collaborate with cross-functional stakeholders throughout the project lifecycle.

Skills

EDR/XDR

Endpoint Security

DLP

Network Security

Cloud Security

Security Architecture

Windows/Linux Environments

Education

Bachelor's degree in Computer Science, Information Security, IT, or related field

Job description

Cybersecurity Manager/ Information Security Manager (Banking)

The Cybersecurity Manager will oversee infrastructure and endpoint security, ensure regulatory compliance, evaluate tech solutions, and provide strategic security guidance across cross-functional projects.

Key Requirements & Qualifications

Education & Background: Bachelor’s degree in Computer Science, Information Security, IT, or a related field.

Experience: 5+ years in cybersecurity, infrastructure security, or operations. Prior experience in the banking or financial services sector is preferred.

Technical Expertise: Practical, hands-on familiarity with EDR/XDR, endpoint protection, Data Loss Prevention (DLP), network/cloud security, security architecture, and Windows/Linux environments.

Governance & Compliance: Understanding of major industry frameworks and regulatory standard requirements (such as NIST, ISO 27001, CIS Controls, and HKMA guidelines). Experience with third-party security audits and solution reviews.

Cross-Functional Advisory: Proven ability to collaborate with non-technical and cross-departmental stakeholders, providing expert security guidance throughout the entire project lifecycle.

Preferred / Bonus Skills

Emerging Tech & AI Security: Background in AI/GenAI security, AI risk management, governance, guardrails, or Post-quantum cryptography.

Certifications: Professional credentials such as CISSP, CISM, CCSP, GIAC, or equivalent certification.