Cybersecurity Strategy & Risk Manager

Cyberport Hong Kong; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Cyberport Hong Kong is seeking a seasoned cybersecurity specialist to report to the Chief Information Security Officer. You will formulate the strategy and roadmap to safeguard information assets and manage cyber and technology risks, and develop governance, policy, standards and procedures aligned with industry best practices.

You will deploy security controls across ICT infrastructure, conduct resilience assessments, monitor security events, and coordinate with stakeholders on incidents.

Qualifications

• Minimum 6 years' hands-on cybersecurity experience in a large organisation.
• Experience in resilience assessment and security governance.
• Proficient with security tools and controls including SIEM, firewalls, and vulnerability scanners.
• Bachelor’s degree in cybersecurity or ICT; professional certifications preferred (CISM, CISSP, etc.).
• Strong communication skills in English and Chinese.

Responsibilities

• Report to the CISO and formulate cyber strategy and roadmaps.
• Develop and maintain cybersecurity governance, standards and procedures.
• Implement security controls across ICT infrastructure and endpoints.
• Conduct regular resilience assessments and monitor control effectiveness.
• Deploy and manage security tools (firewalls, IDS/IPS, SIEM).
• Collaborate with cross-functional teams to embed security in projects.
• Lead incident response and coordinate with stakeholders.
• Deliver security awareness training and management reporting.

Skills

Cyber risk assessment

Security architecture

Threat monitoring

Bilingual English/Chinese

Stakeholder communication

Education

Bachelor's degree in cybersecurity / ICT

CISM

CISSP

CCSP

Tools

SIEM

IDS/IPS

Vulnerability scanners

Firewalls

Encryption

Job description

Cyberport Hong Kong is seeking a seasoned cybersecurity specialist to report to the Chief Information Security Officer. You will formulate the strategy and roadmap to safeguard information assets and manage cyber and technology risks, and develop governance, policy, standards and procedures aligned with industry best practices.

You will deploy security controls across ICT infrastructure, conduct resilience assessments, monitor security events, and coordinate with stakeholders on incidents.