Director, Information Security Strategy & Operations

Be Myjob Company Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Be Myjob Company Limited in Hong Kong seeks a Director, Deputy Head of Information Security to lead governance, risk, compliance, and security operations across CSI. Based in Hong Kong, you will report to the Head of Information Security and shape the security strategy to protect information assets while enabling business growth.

You will oversee security architecture, incident response, third-party risk, and security awareness, mentor a security team, and coordinate audits, regulatory exams,

Qualifications

• Bachelor’s degree or higher in computer science, engineering or related domain discipline.
• Minimum 15 years of relevant IT, cyber and data security experience.
• CISSP, CISM, CIS, ISO 27001 Lead Implementer/Auditor certification is required.
• Fluent in English and Chinese (Putonghua is a must).

Responsibilities

• Lead governance, strategy and risk management for cybersecurity and data security.
• Oversee security operations and incident response across the organization.
• Drive regulatory compliance and audit readiness with regulators and auditors.
• Manage third-party risk assessments and vendor security.
• Develop security architecture and oversee technology transformation initiatives.
• Mentor cybersecurity professionals and build a high-performance security culture.

Skills

Leadership

People management

Project management

Strategic thinking

Communication

Problem-solving

Independent work

English & Chinese proficiency

Security governance

Regulatory compliance

Education

Bachelor’s degree or higher in computer science or related field

Job description

Be Myjob Company Limited in Hong Kong seeks a Director, Deputy Head of Information Security to lead governance, risk, compliance, and security operations across CSI. Based in Hong Kong, you will report to the Head of Information Security and shape the security strategy to protect information assets while enabling business growth.

You will oversee security architecture, incident response, third-party risk, and security awareness, mentor a security team, and coordinate audits, regulatory exams,