Cybersecurity Specialist – ISO 27001 & Hands-On Security

BDO Limited; Hong Kong; On-site; HKD 600,000 - 1,000,000; Full time

Job summary

BDO Limited in Hong Kong seeks a Cybersecurity Specialist (Governance & Technical Security) to strengthen information security controls and support the firm’s ISO/IEC 27001 journey. The role blends governance with practical security work, coordinating remediation and security improvements across endpoints, networks, and cloud services.

You will collaborate with external partners and internal ITS teams, driving implementation and evidence gathering while promoting strong security practices across

Qualifications

• Degree in Information Technology, Computer Science, Cybersecurity or related field.
• At least 5 years of relevant IT/security experience, combining operations with governance.
• Good knowledge of ISO/IEC 27001 and practical experience supporting implementation, certification or audit.

Responsibilities

• Act as a key cybersecurity contact within the ITS team and coordinate day-to-day information security matters.
• Support ISO/IEC 27001 certification programme, including gap assessments and remediation.
• Review controls and identify improvements against ISO 27001 and best practices.
• Coordinate vulnerability assessments, security reviews, penetration testing and remediation.
• Investigate vulnerabilities and assist in applying fixes and mitigating controls.
• Monitor and ensure remediation within timelines.
• Assist in security incidents, including investigation and containment.
• Support configuration and hardening of endpoints, servers, networks, and cloud services.
• Review IAM, MFA and privileged access controls.
• Provide cybersecurity advice to ITS team and support audits and compliance.

Skills

Cybersecurity operations

InfoSec governance

ISO/IEC 27001

Endpoint protection

Vulnerability management

SIEM & monitoring

Access management

MFA & privileged access

Security incident response

English/Chinese communication

Education

Degree in IT/CS/Cybersecurity

Tools

EDR

Firewalls & VPN

Identity & access management

SIEM

Job description

BDO Limited in Hong Kong seeks a Cybersecurity Specialist (Governance & Technical Security) to strengthen information security controls and support the firm’s ISO/IEC 27001 journey. The role blends governance with practical security work, coordinating remediation and security improvements across endpoints, networks, and cloud services.

You will collaborate with external partners and internal ITS teams, driving implementation and evidence gathering while promoting strong security practices across