InfoSec Strategy & Incident Response Lead

NTT Com Asia; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

NTT Com Asia is seeking a senior InfoSec professional to manage the technical domain of information security across the company. You will drive security governance, risk, and compliance for IT and OT environments, leading incident response and continuous improvement.

The role requires strong technical security expertise, the ability to influence stakeholders, and a proactive mindset to implement best-practice controls across a large enterprise in Hong Kong.

Qualifications

• 5+ years in information and cybersecurity within an enterprise environment.
• Hands-on with security tooling for incident response and vulnerability management.
• Experience across IT and OT security, governance and risk controls.
• Security certifications such as CISSP or CISM are required, CCNP/MCSE preferred.

Responsibilities

• Review company-wide information security policies, procedures and standards for alignment with market standards and group policies.
• Lead interdepartmental security stakeholders to ensure compliance for IT/OT systems and applications.
• Oversee continuous monitoring of systems for breaches, access, and vulnerabilities.
• Identify vulnerabilities, advise mitigations, and coordinate remediation plans.
• Coordinate incident response leadership during cyber incidents and post-incident improvement.

Skills

InfoSec leadership

Incident response

Vulnerability management

Cloud security

Compliance knowledge

Education

Degree in Computer Science/IT/Engineering

Tools

SIEM/SOC tools

Nessus/Defender/Qualys

PAM/Cloud security tools

Job description

NTT Com Asia is seeking a senior InfoSec professional to manage the technical domain of information security across the company. You will drive security governance, risk, and compliance for IT and OT environments, leading incident response and continuous improvement.

The role requires strong technical security expertise, the ability to influence stakeholders, and a proactive mindset to implement best-practice controls across a large enterprise in Hong Kong.