Deputy Executive Manager, Business Information Security Office

Global Sports Jobs Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Benefits offered by this job

Competitive salary

Development opportunities

Dynamic working environment

Job summary

Global Sports Jobs Limited is seeking an experienced Cyber Risk Manager within the IT Division's Cyber Security Department to safeguard information assets and ensure resilience of operations across Hong Kong and China. You will act as a trusted cyber advisor, aligning cyber risk with business strategy and presenting updates to committees.

The role requires 10+ years in cyber risk, strong communication skills, and proficiency with governance frameworks and GRC tools.

Qualifications

• Bachelor's degree in Computer Science, IT or related discipline.
• 10+ years of experience in cyber risk management, governance, or related fields.
• Exceptional communication skills, with the ability to translate technical concepts for diverse audiences.
• Expertise in stakeholder engagement, including senior executives and board members.
• Demonstrated ability to foster business partnerships and cultivate a strong risk culture.
• Excellent English writing and verbal communication skills, with the ability to present complex concepts to non-technical audiences.
• Proficiency in key cyber control domains, cyber risk management, governance frameworks and GRC tools.
• Strong organisational and multitasking abilities with meticulous attention to detail.
• Excellent stakeholder management and relationship-building skills.

Responsibilities

• Identify, assess and communicate cyber risks to the business and/or critical supporting functions in line with the Club’s cyber risk management framework.
• Establish and manage the cyber risk profile for assigned business and/or critical supporting functions, ensuring treatment plans are defined, funded and tracked.
• Represent the Cyber Security Department at non-financial risk committees, providing cyber advisory, presenting the cyber risk profile, highlighting material risks and sharing related updates.
• Advise assigned business and/or critical supporting functions on updates to the Club’s cyber security policies and standards, ensuring plans and funding are in place for adoption.
• Embed cyber security into business strategy, objectives, projects and day-to-day operations, and ensure the Club’s strategy, policies, standards and solutions remain relevant to business goals, challenges and applicable regulatory requirements, with full compliance across processes and systems.
• Raise cyber risk awareness and culture within assigned functions, leveraging the Club’s cyber awareness and training programmes and conveying business unit needs for Cyber Security programme awareness and control adoption.
• Advocate modern Agile InfoSec practices, balancing security and business agility through a pragmatic, risk-based approach.
• Act as a trusted cyber advisor, translating complex security concepts into actionable, business-friendly guidance and liaising between Cyber Security and Business & IT stakeholders to ensure seamless integration of controls and foster partnerships.
• During cyber security incidents, provide periodic situation reports to assigned functions and continuously assess the business impact.
• Develop clear and concise updates on cyber risk profiles, strategy, policies and standards, tailored for non-financial risk committee members.

Skills

Cyber risk management

Stakeholder engagement

Executive communication

GRC tools

Risk culture

Education

Bachelor's degree in Computer Science, IT or related discipline

Tools

GRC tools

Job description

About the Role

The role sits within the IT Division’s Cyber Security Department, which acts as the first line of defence, safeguarding information assets, IT systems, networks and cloud platforms and ensuring the resilience and continuity of critical operations. It focuses on cyber risk management, aligning cyber security with business strategy and objectives, and collaborating with stakeholders across Business and IT. The role acts as a trusted cyber advisor and represents the Cyber Security Department at non-financial risk committees. It also promotes cyber risk awareness and supports compliance with regulatory requirements in Hong Kong and China.

Key Responsibilities

• Identify, assess and communicate cyber risks to the business and/or critical supporting functions in line with the Club’s cyber risk management framework.
• Establish and manage the cyber risk profile for assigned business and/or critical supporting functions, ensuring treatment plans are defined, funded and tracked.
• Represent the Cyber Security Department at non-financial risk committees, providing cyber advisory, presenting the cyber risk profile, highlighting material risks and sharing related updates.
• Advise assigned business and/or critical supporting functions on updates to the Club’s cyber security policies and standards, ensuring plans and funding are in place for adoption.
• Embed cyber security into business strategy, objectives, projects and day-to-day operations, and ensure the Club’s strategy, policies, standards and solutions remain relevant to business goals, challenges and applicable regulatory requirements, with full compliance across processes and systems.
• Raise cyber risk awareness and culture within assigned functions, leveraging the Club’s cyber awareness and training programmes and conveying business unit needs for Cyber Security programme awareness and control adoption.
• Advocate modern Agile InfoSec practices, balancing security and business agility through a pragmatic, risk-based approach.
• Act as a trusted cyber advisor, translating complex security concepts into actionable, business-friendly guidance and liaising between Cyber Security and Business & IT stakeholders to ensure seamless integration of controls and foster partnerships.
• During cyber security incidents, provide periodic situation reports to assigned functions and continuously assess the business impact.
• Develop clear and concise updates on cyber risk profiles, strategy, policies and standards, tailored for non-financial risk committee members.

Required Experience & Qualifications

• Bachelor’s degree holder in Computer Science, IT or another discipline.
• 10+ years of experience in cyber risk management, cyber risk governance, or related fields.
• Exceptional communication skills, with the ability to translate technical concepts for diverse audiences.
• Expertise in stakeholder engagement, including senior executives and board members.
• Demonstrated ability to foster business partnerships and cultivate a strong risk culture.
• Exceptional English writing and verbal communication skills, with the ability to present complex concepts to non-technical audiences.
• Proficiency in key cyber control domains, cyber risk management, governance frameworks and GRC tools.
• Strong organisational and multitasking abilities with meticulous attention to detail.
• Excellent stakeholder management and relationship-building skills.

Preferred Skills

• Master’s degree is preferred.

Workplace

The IT Division comprises over 1,500 professionals working collaboratively across Hong Kong and Shenzhen.

Benefits & Perks

• Competitive salary and benefits package.
• Dynamic working environment.
• Development opportunities.