Deputy Head of Information Security & Cyber Risk

CITIC Securities International; Hong Kong; Sur place; HKD 1 200 000 - 2 400 000; Plein temps

Résumé du poste

CITIC Securities International in Hong Kong seeks a Deputy Head of Information Security to lead governance, risk management, and security operations across CSI. You will shape strategy, oversee security programs, ensure regulatory compliance, and drive cyber resilience while enabling business growth.

You will direct incident response, third-party risk, awareness programs, and cross-functional security initiatives, reporting to the Head of Information Security.

Qualifications

• Bachelor's degree or above in computer science, engineering or related domain.
• Minimum 15 years of relevant experience in IT, cyber, and data security.
• Deep understanding of cyber security topics – Firewalls, WAF, Application security, Cloud security, web gateway, endpoint protection, SIEM, threat hunting, IAM, DLP, network security, email security.
• Strong interpersonal, organizational and problem-solving skills as well as project management, client serving, multi-tasking.
• Able to work independently, attention to details, result-driven.
• Enthusiastic, self-motivated with proactive mindset.
• Strong leadership skills and people management skills.
• Excellent command of English and Chinese (Putonghua is a must).
• Certification – CISSP, or CISM/CIS/ ISO 27001 Lead Implementer/Auditor.

Responsabilités

• Lead development, maintenance, and enhancement of cybersecurity and data security strategies, frameworks, policies, standards, and procedures.
• Establish enterprise-wide governance covering data management, lifecycle, protection, and data loss prevention.
• Identify and report cybersecurity and data security risks, drive risk mitigation.
• Provide regular governance and compliance reporting to senior management and governance committees.
• Establish cloud security governance for multi-cloud (AWS, Azure, Alibaba Cloud).
• Ensure infrastructure, systems, and applications comply with ISO 27001, NIST, GDPR, PDPO, PIPL, MAS, etc.
• Maintain audit readiness; coordinate responses to regulatory exams and audits.
• Act as security liaison with regulators, auditors, compliance teams, and stakeholders.
• Oversee SOC activities, threat monitoring, incident management, and Level 2 support.
• Govern vulnerability management with application, platform, and infrastructure teams.
• Provide security oversight for enterprise architecture, cloud adoption, app/infrastructure security.
• Evaluate emerging technologies and threats; strengthen security posture.
• Oversee third-party cybersecurity risk management and vendor security assessments.
• Ensure security controls and contractual requirements in third-party engagements.
• Oversee security awareness programs and stakeholder management.
• Drive cross-functional initiatives for secure, resilient technology services.
• Lead incident response, investigation, recovery, and lessons-learned exercises.
• Ensure disaster recovery and business continuity capabilities and testing.
• Lead tabletop and crisis simulation exercises.

Connaissances

Cybersecurity governance

Risk management

Leadership

Incident response

Cloud security

Regulatory compliance

Stakeholder management

Formation

Bachelor's degree or higher in CS/Engineering or related

Certifications: CISSP / CISM / CIS / ISO 27001 Lead Implementer/Auditor

Outils

AWS

Azure

Alibaba Cloud

SIEM

WAF

Description du poste

CITIC Securities International in Hong Kong seeks a Deputy Head of Information Security to lead governance, risk management, and security operations across CSI. You will shape strategy, oversee security programs, ensure regulatory compliance, and drive cyber resilience while enabling business growth.

You will direct incident response, third-party risk, awareness programs, and cross-functional security initiatives, reporting to the Head of Information Security.