Cybersecurity Project Manager

Infosight Consulting Limited; Hong Kong; On-site; HKD 600,000 - 1,000,000; Full time

Job summary

Infosight Consulting Limited in Hong Kong seeks an experienced cybersecurity project manager to lead end-to-end delivery across IAM, vulnerability management, SOC/SIEM, and data protection domains. You will coordinate Security, Infrastructure, Applications, and Risk & Compliance teams, manage budgets and timelines, and drive remediation and governance activities.

You will conduct stakeholder workshops, develop governance dashboards, and ensure controls throughout the project lifecycle, including

Qualifications

• Proven experience managing end-to-end cybersecurity projects from planning to closure.
• Strong understanding of IAM/PAM, vulnerability management, SOC/SIEM, network security.
• Experience with RAID logs, budgets, resource plans, governance deliverables.
• Coordinate cross-functional teams across Security, Infra, App, Network, Risk & Compliance, and business.
• Experience driving security assessments, remediation, penetration testing and control implementation.
• Strong stakeholder management with senior leadership, vendors, auditors, and business users.
• Excellent communication, presentation, and reporting skills.
• Ability to work independently and manage multiple priorities to deliver projects.

Responsibilities

• Lead end-to-end delivery of cybersecurity projects, aligning with objectives, security requirements, budget and timelines.
• Conduct stakeholder meetings/workshops to gather and document business, technical, and cybersecurity requirements.
• Develop and maintain project plans, RAID logs, governance reports and documentation.
• Coordinate between business users, cybersecurity, infrastructure, application teams, vendors and third-party service providers.
• Manage risks, issues, dependencies, scope changes and escalations with timely resolution.
• Facilitate security design reviews, technical workshops, architecture discussions and governance meetings.
• Ensure cybersecurity controls and compliance requirements are incorporated throughout the lifecycle.
• Coordinate security assessments, vulnerability scans, pen tests, remediation plans, and closure of findings.
• Track milestones, budgets, resources, and performance metrics; provide status updates to management.
• Prepare dashboards, executive summaries, PSC/Steering Committee reports, and governance materials.
• Collaborate with Security Architects, SOC, Risk & Compliance to ensure standards adherence.
• Manage vendor deliverables, contracts, and service commitments for cybersecurity projects.
• Support audit, regulatory, and compliance requirements with evidence collection and responses.
• Ensure smooth transition to operations with knowledge transfer and closure activities.

Skills

End-to-end cybersecurity project mgmt

Stakeholder management

Communication and reporting

Cross-functional coordination

Risk & governance reporting

Tools

Azure

AWS

GCP

Job description

Desired Competencies (Technical/Behavioral Competency)

Must-Have

Proven experience managing end-to-end cybersecurity projects, including planning, execution, monitoring, governance, and project closure.

Strong understanding of cybersecurity domains such as:

Identity & Access Management (IAM/PAM)

Vulnerability Management

Security Operations (SOC/SIEM)

Network Security

Data Protection and Incident Response

Experience managing project schedules, budgets, RAID logs (Risks, Assumptions, Issues, Dependencies), resource plans, and governance deliverables.

Ability to coordinate cross-functional teams including Security, Infrastructure, Application, Network, Risk & Compliance, and Business stakeholders.

Experience driving security assessments, vulnerability remediation, penetration testing activities, and security control implementation.

Strong stakeholder management skills with the ability to engage senior leadership, technical teams, vendors, auditors, and business users.

Excellent communication, presentation, and reporting skills.

Ability to work independently, manage multiple priorities, and drive projects to completion.

Good-to-Have

Experience in Airline/Aviation industries.

Hands-on exposure to cloud security platforms (Azure, AWS, GCP).

Experience supporting cybersecurity audits, compliance programs, and regulatory assessments.

Knowledge of Security Architecture Reviews and Third-Party Risk Management.

Project Management certifications:

PMP

PRINCE2

Role descriptions / Expectations from the Role

Lead end-to-end delivery of cybersecurity projects, ensuring alignment with business objectives, security requirements, budget, and timelines.

Conduct stakeholder meetings and workshops to gather, analyze, and document business, technical, and cybersecurity requirements.

Develop and maintain project plans, schedules, RAID logs (Risks, Assumptions, Issues, Dependencies), governance reports, and project documentation.

Coordinate between business users, cybersecurity teams, infrastructure teams, application teams, vendors, and third-party service providers.

Manage project risks, issues, dependencies, scope changes, and escalations, ensuring timely resolution and mitigation.

Facilitate security design reviews, technical workshops, architecture discussions, and project governance meetings.

Ensure cybersecurity controls and compliance requirements are incorporated throughout the project lifecycle.

Coordinate security assessments, vulnerability scans, penetration testing activities, remediation plans, and closure of security findings.

Track project milestones, deliverables, budgets, resource utilization, and performance metrics, providing regular status updates to management.

Prepare and present project dashboards, executive summaries, PSC/Steering Committee reports, and governance materials.

Work closely with Security Architects, Security Operations, Risk & Compliance teams to ensure adherence to cybersecurity frameworks and standards.

Manage vendor deliverables, contracts, and service commitments related to cybersecurity projects.

Support audit, regulatory, and compliance requirements by coordinating evidence collection, remediation activities, and audit responses.

Ensure successful transition to operations, including documentation, knowledge transfer, support readiness, and project closure activities.