Cybersecurity/Tech Risk Manager / Senior Manager / Director - HK$55-100K+B

PrimePeak Group Limited; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

PrimePeak Group Limited seeks an experienced Cybersecurity/Tech Risk Manager to lead risk assessment and security posture across crypto initiatives. You will engage with cross-functional teams and external partners to embed security measures, manage regulatory and third-party risks, and drive mitigation strategies.

The role requires hands-on expertise in application security, security operations, or tech risk management, plus strong English and Cantonese communication.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or related field; relevant certifications (e.g., CISSP, CEH, OSCP, or CompTIA Security+) are required.
• 5+ years of experience in cybersecurity or tech risk, with hands-on expertise in at least one of: Application Security (SAST/DAST), Security Operations (SIEM like Splunk/ELK), or Tech Risk management (ISO 27001/NIST).
• Strong technical skills in vulnerability testing and IT auditing.
• Proven ability to work proactively in a dynamic environment, taking ownership and driving initiatives to completion.
• Excellent communication skills in English and Cantonese

Responsibilities

• Collaborate with cross-functional teams and external parties to integrate security measures into crypto projects, such as token launches or platform upgrades.
• Assess and manage technical risks across crypto operations, including regulatory compliance, third-party risk, and business continuity planning.
• Conduct risk audits and develop mitigation strategies for exchange platforms.
• Implement security automation and train teams to stay ahead of emerging threats in the crypto space.
• Contribute to large-scale platform enhancements with minimal business disruption.
• Document security protocols and prepare risk assessment reports for stakeholders.
• Stay updated on cyber security and tech risk trends and apply knowledge to projects.

Skills

Cybersecurity

Tech risk

Risk assessment

ISO 27001

NIST

SAST/DAST

SIEM

Splunk

ELK stack

Vulnerability testing

IT auditing

English & Cantonese

Education

Bachelor's or Master's in CS/IT

Relevant certifications (CISSP, CEH, OSCP, CompTIA Security+)

Tools

SAST

DAST

Splunk

ELK stack

ISO 27001

NIST

Job description

Job Summary:
Our client is a well established MNC, the Team Head is seeking for Cybersecurity / Tech Risk Manager / Senior Manager / Director across their growing team. They are looking for independent and proactive individuals who can take initiative to engage risk assessment, and enhance security posture.

Key Responsibilities:

Collaborate with cross-functional teams and external parties to integrate security measures into crypto projects, such as token launches or platform upgrades.

Assess and manage technical risks associated with crypto operations, including regulatory compliance, third-party risk, and business continuity planning.

Conduct risk audits and develop mitigation strategies for our exchange platform.

Take proactive initiatives to improve cybersecurity processes, such as automating security workflows, conducting training sessions, and staying ahead of emerging threats in the crypto space.

Contribute to large-scale projects, including platform enhancements, while ensuring minimal disruption to business operations.

Document security protocols, prepare reports on risk assessments and incidents, and communicate findings to stakeholders.

Stay updated on cyber security, tech risk trends and apply knowledge

Required Qualifications and Skills:

Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related field; relevant certifications (e.g., CISSP, CEH, OSCP, or CompTIA Security+) are required.

5+ years of experience in cybersecurity or tech risk, with hands-on expertise in at least one of the following: Application Security (e.g., code analysis tools like SAST/DAST), Security Operations (e.g., SIEM tools like Splunk or ELK stack), or Tech Risk management (e.g., risk frameworks like ISO 27001 or NIST).

Good technical skills in tech risk and cyber security, such as vulnerability testing, IT auditing

Proven ability to work proactively in a dynamic environment, taking ownership of tasks and driving initiatives to completion independently.

Excellent communication skills in English and Cantonese