Information Security Manager (Perm, FS, 1LoD)

Morgan McKinley; Hong Kong; On-site; HKD 800,000 - 1,200,000; Full time

Job summary

Morgan McKinley in Hong Kong is seeking a seasoned IT security professional to join its Information Security Team. You will design enterprise-wide security architecture, lead defense-in-depth initiatives, and oversee threat detection, incident response, and regulatory alignment.

Responsibilities include reviewing designs, deploying AI/LLM security controls, automating risk analyses, log parsing, and remediation across the vulnerability lifecycle.

Qualifications

• Bachelor's degree or higher in a relevant technical field.
• At least 5 years of information security experience in financial services.
• Experience in Red/Blue teaming and offensive testing tactics.
• Understanding of AI/LLM mechanics and AI security controls.
• Proven track record managing security solutions lifecycle.
• 5+ years configuring security solutions, parsing logs, and building compliance rules.
• Strong cross-functional coordination and AI security project delivery.
• CISSP, CISA or CISM is highly preferred.
• Fluent in English, Cantonese and Mandarin.

Responsibilities

• Formulate, optimize, and maintain the bank's security architecture and defense-in-depth framework.
• Review security designs for new systems and major changes; conduct architectural assessments.
• Research and deploy AI/LLM solutions in security operations; automate workflows for logs and risk analysis.
• Maintain security policies, standards, and SOPs; drive remediation for findings.
• Lead daily monitoring and incident response; conduct drills and post-incident reviews.

Skills

Security architecture

Threat detection

Incident response

AI security

Risk analysis

Compliance

Cross-functional

English Cantonese Mandarin

Education

Bachelor's degree or higher in CS/IT/Cybersecurity

Job description

The hiring company is looking for seasoned IT security professional to join their Information Security Team.

Responsibilities

• Formulate, optimize, and maintain the bank's enterprise-wide security architecture and defense-in-depth framework.

• Review security designs for new systems and major project changes, and conduct regular architectural assessments to eliminate vulnerabilities and harden controls.

• Research, deploy, and scale AI/LLM solutions in security operations (PoC to production). Develop automated workflows for log parsing, risk analysis, compliance checking, intelligent alert triage, and sensitive data discovery.
• Maintain security policies, standards, and SOPs in line with regulatory expectations. Execute compliance and data protection assessments, partner with Risk and Audit teams, and drive remediation for vulnerability gaps and audit findings.
• Lead daily monitoring and threat detection across digital assets using correlation analysis and attack path tracing. Command incident response, cyber drills, and post-incident reviews (PIR) while continually upgrading monitoring capabilities.

Requirements

• Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, or a relevant technical field.
• At least 5 years of dedicated information security experience within the financial services sector.
• Practical experience in Red/Blue teaming and offensive testing tactics (e.g., SQLi, XSS, privilege escalation, CC/DDoS attacks).
• Sound understanding of foundational AI/LLM mechanics alongside practical experience designing or auditing AI security controls.
• Proven track record managing the full operational lifecycle of security solutions (vendor evaluation, procurement, deployment, and ongoing maintenance).
• With 5+ years of hands‑on experience configuring security solutions, parsing logs, automating risk analyses, and building compliance rules.
• Strong strategic mindset paired with exceptional cross‑functional coordination skills; demonstrated success in delivering innovative AI security projects in a fast‑paced environment.
• With CISSP, CISA or CISM is highly preferred
• Proficient in English, Cantonese, and Mandarin