Deputy Director, Infrastructure - Technology & Innovation (Cybersecurity)

Kerry Properties Limited; Hong Kong; On-site; HKD 1,000,000 - 1,800,000; Full time

Job summary

Kerry Properties seeks a Deputy Director, Infrastructure - Technology & Innovation (Cybersecurity) to lead and advance the company’s cybersecurity capabilities across Hong Kong and Mainland projects. You will oversee day-to-day operations, manage initiatives, and work with the Technology & Innovation Leadership team to shape strategic roadmaps for defending against evolving threats.

You will lead the cybersecurity program, collaborate with stakeholders, and drive security governance, policy

Qualifications

• 12+ years in cybersecurity operations management.
• CISSP required; CCSP/OSCP/CEH certifications preferred.
• ITIL v4 certification preferred.
• Strong hands-on knowledge of IAM/PIM/PAM, SOC, DLP, app security, cloud and endpoint security.
• Experience with Enterprise PAM, Microsoft security ecosystem, DevSecOps, red/blue teaming.
• Familiar with ITIL/COBIT/NIST/ISO 27001 and security governance.
• Excellent written and spoken English and Chinese (Cantonese/Mandarin).

Responsibilities

• Oversee daily cybersecurity operations and coordinate with outsourcing partners.
• Plan and execute cybersecurity projects and programs on schedule.
• Assist leadership in designing the cybersecurity roadmap and strategy.
• Monitor threat landscape and address security risks proactively.
• Lead incident response, containment, investigation and remediation.
• Drive adoption of security governance, policies, and standards.
• Collaborate with cross-functional teams to raise security awareness and ensure compliance.
• Provide regular updates to senior leadership on security posture and risks.
• Evaluate new technologies to strengthen cybersecurity infrastructure.

Skills

Cybersecurity PM

Security governance

Incident response

Threat monitoring

Cloud security

IAM/PIM/PAM

SOC operations

Education

CISSP certification

CCSP certification

OSCP certification

CEH certification

ITIL v4 certification

Tools

SIEM platforms

PAM tools

Vulnerability management

WAF

DNSSec

Job description

Deputy Director, Infrastructure - Technology & Innovation (Cybersecurity)

At Kerry Properties, we commit to employing people who are passionate and dedicated. We look for people who always strive for excellence and possess a positive attitude. In turn, we offer our people boundless opportunities in career advancement and realization of their potential.

Job Highlights:

You will play a pivotal role in managing and strengthening the organization's cybersecurity capabilities across various projects and asset types mainly in Hong Kong and Mainland. Your responsibilities encompass overseeing day-to-day cybersecurity operations, leading the project management and execution of planned cybersecurity initiatives and programs, and collaborating closely with the Technology & Innovation Leadership team to develop and implement strategic roadmaps aimed at enhancing the company's defence against emerging internal and external threats.

Responsibilities:

• Oversee and coordinate the daily operations of the cybersecurity team (including outsourcing partner), ensuring robust protection of corporate assets and information systems.
• Plan, manage, and execute cybersecurity projects and programs, ensuring alignment with organizational goals and timely delivery of key initiatives.
• Assist the leadership in designing, developing, and continually refining the corporate cybersecurity roadmap and strategy.
• Monitor the evolving threat landscape to proactively address internal and external security risks.
• Lead incident response efforts, coordinating containment, investigation, and remediation activities as required.
• Drive the implementation of the best & applicable practices in cybersecurity governance, policies, standards, and procedures.
• Collaborate with cross-functional teams to raise security awareness, enforce & validate compliance, and foster a culture of security throughout the organization.
• Provide regular updates and reports to senior leadership regarding the security posture, project progress, and key risk indicators.
• Evaluate and recommend new technologies or tools to strengthen the organization's cybersecurity infrastructure.

Requirements:

• At least 12 years of experience in cybersecurity operations management, project management, supporting information security services and solutions
• Holder of valid CISSP certification is a must with one or more on CCSP, OSCP, CEH qualifications
• Holder of ITIL v4 certification is preferred
• Strong knowledge with hands-on experiences on standard security management frameworks, identity and privileged access management (IAM, PIM & PAM), vulnerability management solutions, SOC operations, DLP, application/code security, Firewall, WAF, SIEM, DNSSec, Cloud security, endpoint security solutions and application security of enterprise systems.
• Hands-on experiences on managing and implementing Enterprise PAM, Microsoft security ecosystem, DevSecOps, Red/blue teaming, security architecture and baselines on hybrid Cloud environments, phishing attack simulation, security awareness and penetration tests.
• Knowledges in Service Management framework, Security/privacy and compliance standards and framework (e.g., ITIL, COBIT, NIST, ISO 27001) will be an advantage
• Good command of both written and spoken English and Chinese (Cantonese and Mandarin)
• Strong analytical, organizational, and leadership skills, with the ability to manage multiple projects in a fast-paced environment.

The personal data provided will only be used for recruitment and employment-related purposes. All personal data provided will be treated in strict confidence. All applications may be considered for other suitable position(s) in the Kuok/Kerry Group and its subsidiary/ associated companies. For correction of or access to personal data after submission of the application or enquiries on recruitment matters, please contact Human Resources Department by email to [e-mail] . Please mark "Confidential: Personal Data Access/ Correction/ Recruitment Enquiries" on your correspondence. Information on unsuccessful candidates will normally be destroyed after 24 months from the date of application. By submitting an application through Kerry Properties' Career webpage, you are deemed to have consented to its Personal Information Collection Statement.