Information Security Manager (Perm, FS, 1LoD)

Morgan Mckinley Limited; Hong Kong; Sur place; HKD 600 000 - 850 000; Plein temps

Résumé du poste

Morgan Mckinley Limited is seeking an Information Security Manager to strengthen enterprise security architecture and defense-in-depth for a financial services client in Hong Kong. The role covers security design reviews, automation, and continuous risk remediation.

The candidate will lead threat detection, incident response, and governance while aligning AI security controls with regulatory expectations. Strong cross-functional coordination is essential.

Qualifications

• Bachelor’s degree or higher in a relevant technical field.
• At least 5 years of information security experience in financial services.
• Experience with Red/Blue teaming and offensive testing tactics.
• Knowledge of AI/LLM mechanics and security controls.

Responsabilités

• Formulate and maintain the enterprise-wide security architecture.
• Review designs for new systems and major project changes to harden controls.
• Lead security monitoring, incident response, and post-incident reviews.

Connaissances

Security architecture

Threat monitoring

Incident response

AI security

Formation

Bachelor's degree in CS/IT/Cybersecurity

Outils

SIEM

Risk assessment tooling

AI security controls

Description du poste

Information Security Manager (Perm, FS, 1LoD)

The hiring company is looking for seasoned IT security professional to join their Information Security Team.

Responsibilities

Formulate, optimize, and maintain the bank's enterprise-wide security architecture and defense-in-depth framework.

Review security designs for new systems and major project changes, and conduct regular architectural assessments to eliminate vulnerabilities and harden controls.

• Research, deploy, and scale AI/LLM solutions in security operations (PoC to production). Develop automated workflows for log parsing, risk analysis, compliance checking, intelligent alert triage, and sensitive data discovery.
• Maintain security policies, standards, and SOPs in line with regulatory expectations. Execute compliance and data protection assessments, partner with Risk and Audit teams, and drive remediation for vulnerability gaps and audit findings.
• Lead daily monitoring and threat detection across digital assets using correlation analysis and attack path tracing. Command incident response, cyber drills, and post-incident reviews (PIR) while continually upgrading monitoring capabilities.

Requirements

• Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a relevant technical field.
• At least 5 years of dedicated information security experience within the financial services sector.
• Practical experience in Red/Blue teaming and offensive testing tactics (e.g., SQLi, XSS, privilege escalation, CC/DDoS attacks).
• Sound understanding of foundational AI/LLM mechanics alongside practical experience designing or auditing AI security controls.
• Proven track record managing the full operational lifecycle of security solutions (vendor evaluation, procurement, deployment, and ongoing maintenance).
• With 5+ years of hands‑on experience configuring security solutions, parsing logs, automating risk analyses, and building compliance rules.
• Strong strategic mindset paired with exceptional cross‑functional coordination skills; demonstrated success in delivering innovative AI security projects in a fast‑paced environment.
• With CISSP, CISA or CISM is highly preferred
• Proficient in English, Cantonese, and Mandarin