IT Cyber Security Manager

Recruit Squad Limited; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Recruit Squad Limited is seeking an experienced cybersecurity consultant in Hong Kong to lead deployment, integration, and optimization of security solutions across IAM, PAM, and ITDR. You will support SDLC, work with cloud platforms (AWS/Azure), and coordinate with IT and business users to ensure secure operations.

The role requires 7+ years in cybersecurity projects, strong problem‑solving, and excellent communication in English/Cantonese/Mandarin, with relevant certifications preferred.

Qualifications

• Bachelor’s degree in Computer Science, Engineering or related field.
• 7+ years of experience in cybersecurity consulting, operations, solution implementations, or related technology projects.
• Experience implementing cybersecurity solutions including IAM, PAM, secret management, ITDR; knowledge of AI/ML is advantageous.
• Cybersecurity certifications such as CISSP, CISP, or CISA are highly preferred.
• Strong knowledge of IT security frameworks and standards (ISO 27001, NIST CSF, DPO IT Security Policy, Cybersecurity Law).

Responsibilities

• Develop, maintain and fine‑tune system operating procedures including backup, DR, vulnerability, patch management, monitoring and audit.
• Serve as SME to support design, procurement, implementation, operation, and optimization of cybersecurity solutions.
• Participate in SDLC design, testing, training, and support for cybersecurity systems.
• Coordinate with IT and business users to enable cybersecurity solutions.
• Identify and mitigate security incidents, perform vulnerability assessments, support pen tests, and recommend improvements.

Skills

Analytical thinking

Strong communication

Independent in fast-paced environment

Education

Bachelor’s degree in CS/Engineering or related field

Tools

IAM

PAM

Secret management tools

ITDR

AWS

Azure

Jenkins

Docker

Kubernetes

System hardening

Patch management

Job description

Responsibilities

• Develop, maintain and fine-tune system operating procedures, including back-up & disaster recovery, vulnerability, update & patch management, system maintenance and monitoring and audit.


• Serve as a Subject Matter Expert to support the research, design, procurement, implementation, operationalization, and optimization of new and revamp of the cybersecurity solutions.


• Participate in the system development lifecycle (SDLC), such as architecture and infrastructure design, technical requirement and operation documentation, technical and user testing, user training, maintenance and support.


• Participate in system integration developments and administer, support and troubleshoot cybersecurity Systems.


• Identify and mitigate security-related incidents, perform vulnerability assessments, support penetration tests, and provide recommendations for improvements.


• Support integration of target applications with Privilege Access Management (PAM) solutions and execute secure onboarding of new applications into the PAM system.


• Support and maintain Data Loss Prevention (DLP) solutions: deploy DLP agents across endpoints and servers, configure DLP policies, and monitor policy enforcement.


• Monitor and triage vulnerability scan results on a regular basis and prioritize vulnerabilities based on risk severity.


• Work closely with technical vendors and internal stakeholders to ensure compliance requirements are addressed and security solutions are implemented effectively.


• Coordinate and collaborate closely with IT and business users to ensure successful enablement of cybersecurity solutions.

Requirements

• Bachelor’s or above degree in Computer Science, Engineering or related field.


• At least 7+ years of experience in cybersecurity consulting, operations, solution implementations, or related technology projects. Candidates with more experience will be considered for senior specialist/manager roles.


• Proven experience in implementing cybersecurity solutions, including Identity and Access Management (IAM), Privileged Access Management (PAM), Secret Management Tools, or identity threat detect and response (ITDR), with knowledge in AI and machine learning would be a definite advantage.


• Cybersecurity certifications such as CISSP, CISP, or CISA, are highly preferred.


• In-depth knowledge of IT security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, Digital Policy Office (DPO) IT Security Policy, and Cybersecurity Law of the People’s Republic of China.


• Strong understanding of computer systems, including operating systems, databases, network, infrastructure, and cloud computing.


• Analytical thinker with the ability to understand, visualize, analyse, and resolve difficult issues.


• Experienced with cloud computing platforms such as AWS or Azure, and DevSecOps practices and tools such as Jenkins, Docker, or Kubernetes.


• Hands-on experience with system implementations and operations, including system hardening, vulnerability and patch management, system architecture and infrastructure design.


• Excellent interpersonal, communication, writing, presentation skills, organizational and time management skills, with ability to work independently in a fast-paced environment and build strong relationship with stakeholders


• Native/Fluent in English, Cantonese, (and/or Mandarin)