Head of IT, Enterprise Systems & Information Security — Hostmost Engineering Ltd
Location: Wong Chuk Hang, Hong Kong (Hong Kong Island South) Employment type: Full-time, permanent Salary: HK$40,000 – HK$55,000 per month, commensurate with experience Reports to: Director of Operations Reference: IT-HEAD-2026
About Hostmost
Hostmost Engineering Ltd is a Hong Kong-headquartered maritime engineering group serving the international shipping industry, with approximately 200 staff across seven offices in Hong Kong, Singapore, the Philippines, China, Vietnam, Canada and the United States. Our engineers service navigation, communication and safety equipment on vessels worldwide, and our operations run continuously across time zones.
The role
We are seeking a Head of IT, Enterprise Systems & Information Security with group-wide responsibility for the technology that connects our seven offices. Reporting directly to the Director of Operations, the role owns the group’s enterprise systems, its Microsoft 365 identity and tenant security, its ERP platform, its automation layer and its information security posture across every jurisdiction in which we operate.
This is a senior position that is unusual in its breadth. The group runs a developer-grade technology estate — an in-house enterprise web platform, a self-hosted automation platform of over 100 production workflows, self-hosted archiving, AI-assisted document and helpdesk systems and a Business Central ERP — with a very small IT team. The role therefore requires a single individual who combines four disciplines that are rarely found together: enterprise application architecture and development, systems integration and automation at scale, Microsoft 365 tenant and identity security ownership, and applied AI engineering. The successful candidate will personally design, build, secure and operate these systems, and will lead the function across offices in seven countries.
Responsibilities
- Group-wide enterprise systems – Own the strategy, architecture and delivery of all internal enterprise systems for all seven offices
- Personally design, build and maintain the group’s internal enterprise web platform (React, Node.js, PostgreSQL) — the system of record for meetings, documents, HR processes, leave, organisation structure, engineer scheduling and archives across the group
- Own the self-hosted automation platform (n8n) and its 100+ production workflows integrating ERP, helpdesk, HR, security and field-service systems
- Lead the group ERP migration to Microsoft Dynamics 365 Business Central: master data, integration architecture, document layouts, vendor management and contract governance
- Identity, tenant and information security – Own the group’s Microsoft 365 tenant across seven countries: Entra ID identity architecture, Conditional Access, privileged-access governance, SharePoint, Exchange Online, Graph API and tenant administration
- Own the group’s information security posture: email authentication and filtering (SPF/DKIM/DMARC, transport rules, threat-intelligence feeds), identity security, partner and vendor access control, and incident investigation and response
- Maintain the group’s security governance framework: risk register, security plan, policies, and data-privacy compliance across every operating jurisdiction
- Design, deploy and operate AI-assisted systems: document classification, retrieval-based assistants over technical and policy documentation, and helpdesk automation
- Own the helpdesk platform (Zendesk) and its automation across all offices
- Manage self-hosted cloud infrastructure (AWS, Docker), including backup, monitoring and disaster recovery
- Lead IT operations and support across all offices and time zones, and report to the directors on governance, security and delivery
Requirements
- Degree in Computer Science, Information Technology or a related discipline, or equivalent professional experience evidenced by a documented track record of delivered systems
- Minimum 5 years in enterprise IT systems delivery, including at least 2 years leading an IT function or major programme
- Personal, hands-on delivery of a production enterprise web application (React, Node.js, PostgreSQL, REST integration) as sole or lead developer — a portfolio of systems built will be required
- Ownership of a workflow automation platform (n8n or equivalent) at scale in production, integrating multiple enterprise systems
- Full Microsoft 365 tenant ownership for a multi-country organisation: Entra ID, Conditional Access, privileged-access governance, Exchange Online, SharePoint, Graph API and PowerShell
- Information security ownership including email authentication (SPF/DKIM/DMARC), threat-intelligence integration, identity security, and documented incident investigation and response
- ERP implementation or migration experience; Microsoft Dynamics 365 Business Central strongly preferred
- Operation of self-hosted services on cloud infrastructure (AWS or equivalent) with Docker, including backup and disaster recovery
- Applied AI / LLM integration in production: retrieval pipelines, document classification, vector databases
- Experience supporting multi-office, multi-jurisdiction operations across time zones
- Fluent English essential; Cantonese and/or Mandarin an advantage
- Experience in the maritime, shipping or engineering services sector an advantage
Hostmost Engineering Ltd is an equal opportunity employer.