IT Security Manager / Associate Director

Recruit Squad Limited; Hong Kong Island; On-site; HKD 900,000 - 1,600,000; Full time

Job summary

Accenture Technology Solutions (HK) Ltd on Hong Kong Island is seeking an IT Security Manager / Associate Director to lead cybersecurity programs, strengthen IAM, PAM and ITDR, and drive secure design across systems.

You will oversee vulnerability management, cloud security, DevSecOps practices, and collaborate with stakeholders to align with ISO 27001 and NIST frameworks.

This role requires senior leadership, strong communication and hands-on experience in large-scale security deployments.

Qualifications

• Bachelor’s degree in Computer Science, Engineering or related field.
• 7+ years in cybersecurity consulting, operations or related projects; senior roles possible with more experience.
• Experience implementing IAM, PAM, secret management or ITDR; AI/ML knowledge is a plus.
• Relevant cybersecurity certifications (CISSP/CISA/CISP) preferred.
• Strong knowledge of ISO 27001, NIST CSF, DPO IT Security Policy, and China Cybersecurity Law.
• Proficient in cloud platforms (AWS/Azure) and DevSecOps practices.

Responsibilities

• Develop, maintain and fine-tune system operating procedures including DR, patch management and monitoring.
• Serve as SME to support design, procurement, implementation and optimization of cybersecurity solutions.
• Participate in SDLC architecture, testing, training, maintenance and support.
• Administer and troubleshoot cybersecurity systems; support system integration developments.
• Identify and mitigate security incidents, perform vulnerability assessments and penetration test support.
• Support PAM integration and secure onboarding of applications.
• Maintain DLP solutions, deploy agents and monitor policy enforcement.
• Monitor vulnerability scans and prioritize remediation by risk.
• Collaborate with vendors and stakeholders to ensure compliant security solutions.
• Coordinate with IT and business users for successful cybersecurity enablement.

Skills

IAM

PAM

ITDR

AI/ML

DevSecOps

Jenkins

Docker

Kubernetes

Cloud (AWS/Azure)

ISO27001/NIST

Cybersecurity frameworks

Education

Bachelor’s degree in Computer Science/Engineering

Tools

Jenkins

Docker

Kubernetes

Secret Management Tools

Job description

IT Security Manager / Associate Director

• Develop, maintain and fine-tune system operating procedures, including back-up & disaster recovery, vulnerability, update & patch management, system maintenance and monitoring and audit.
• Serve as a Subject Matter Expert to support the research, design, procurement, implementation, operationalization, and optimization of new and revamp of the cybersecurity solutions.
• Participate in the system development lifecycle (SDLC), such as architecture and infrastructure design, technical requirement and operation documentation, technical and user testing, user training, maintenance and support.
• Participate in system integration developments and administer, support and troubleshoot cybersecurity Systems.
• Identify and mitigate security-related incidents, perform vulnerability assessments, support penetration tests, and provide recommendations for improvements.
• Support integration of target applications with Privilege Access Management (PAM) solutions and execute secure onboarding of new applications into the PAM system.
• Support and maintain Data Loss Prevention (DLP) solutions: deploy DLP agents across endpoints and servers, configure DLP policies, and monitor policy enforcement.
• Monitor and triage vulnerability scan results on a regular basis and prioritize vulnerabilities based on risk severity.
• Work closely with technical vendors and internal stakeholders to ensure compliance requirements are addressed and security solutions are implemented effectively.
• Coordinate and collaborate closely with IT and business users to ensure successful enablement of cybersecurity solutions.

Requirements

• Bachelor’s or above degree in Computer Science, Engineering or related field.
• At least 7+ years of experience in cybersecurity consulting, operations, solution implementations, or related technology projects. Candidates with more experience will be considered for senior specialist/manager roles.
• Proven experience in implementing cybersecurity solutions, including Identity and Access Management (IAM), Privileged Access Management (PAM), Secret Management Tools, or identity threat detect and response (ITDR), with knowledge in AI and machine learning would be a definite advantage.
• Cybersecurity certifications such as CISSP, CISP, or CISA, are highly preferred.
• In-depth knowledge of IT security frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, Digital Policy Office (DPO) IT Security Policy, and Cybersecurity Law of the People’s Republic of China.
• Strong understanding of computer systems, including operating systems, databases, network, infrastructure, and cloud computing.
• Analytical thinker with the ability to understand, visualize, analyse, and resolve difficult issues.
• Experienced with cloud computing platforms such as AWS or Azure, and DevSecOps practices and tools such as Jenkins, Docker, or Kubernetes.
• Hands-on experience with system implementations and operations, including system hardening, vulnerability and patch management, system architecture and infrastructure design.
• Excellent interpersonal, communication, writing, presentation skills, organizational and time management skills, with ability to work independently in a fast-paced environment and build strong relationship with stakeholders
• Native/Fluent in English, Cantonese, (and/or Mandarin)

Accenture Technology Solutions (HK) Ltd

Hong Kong Island, HK