Lead - Cyber Security Architect

Horizon Technology Recruitment; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

Horizon Technology Recruitment is seeking a senior security architect specialising in operational technology and enterprise security. The role is hands-on, bridging IT and OT security, and leading architecture reviews against standards and regulatory expectations.

You will own security baselines, guide end-to-end secure designs, and mentor a team of architects while coordinating across vendors and internal stakeholders in Hong Kong. Fluent English and Chinese are required.

Qualifications

• Degree-level education or equivalent.

Responsibilities

• Act as the recognised authority on securing operational technology, running architecture reviews against standards and internal security requirements.
• Provide hands-on direction across IT and OT security, including system hardening and secure design.
• Define security baseline requirements and update them as platforms/infrastructure expand.
• Guide end-to-end secure architectures, including hardening and configuring security controls.
• Contribute to internal security policies, standards and guidance.
• Embed architectural assurance into business case reviews, checking designs for posture across networks and infrastructure.
• Run technology evaluations with internal and external teams to select fit-for-purpose tooling.
• Steer and track delivery of security initiatives across the function.
• Support security operations with specialist input during IT and OT incidents.
• Mentor and upskill architects and security colleagues across IT/OT topics.
• Manage vendors across project delivery and ongoing support.

Skills

Operational technology security

Security architecture design

IT/OT convergence

Vendor management

Cyber risk management

NIST/ISO frameworks

CISSP

SABSA

GICSP

Leadership & mentoring

Bilingual (English/Chinese)

Education

Degree-level education or equivalent

Tools

GICSP

CISSP

SABSA

Job description

A well-established organisation with a significant operational technology and industrial systems footprint, investing in the maturity of its enterprise security capability. This is a senior, hands-on security architecture role within the central security function, focused on both corporate IT and industrial operational technology environments.

Responsibilities

• Act as the recognised authority on securing operational technology, running architecture reviews of proposed operational technology solutions against relevant standards, regulatory expectations and internal security requirements.
• Provide hands-on technical direction across IT and operational technology security, spanning system hardening and secure design for both hardware- and software-oriented initiatives.
• Own the definition of security baseline requirements, revisiting and updating them as new platforms and infrastructure come into scope.
• Guide implementation of secure architectures end to end, including the hardening and configuration of security controls.
• Contribute to shaping and maintaining internal security policies, standards and guidance.
• Embed architectural assurance into the business case review cycle, checking designs for a sound posture across both network and infrastructure layers.
• Run technology evaluations with mixed internal and external teams to select fit-for-purpose security tooling.
• Steer and track delivery of security initiatives across the function.
• Support the security operations team with specialist input during IT and operational technology incidents.
• Mentor and upskill fellow architects and wider security colleagues across IT and operational technology security topics.
• Manage vendors across project delivery and ongoing technical support.

Requirements

• Degree-level education or equivalent.
• Substantial background in operational technology and its cyber security, underpinned by strong experience in security infrastructure design and delivery.
• Proven track record designing security architectures across IT, operational technology and converged IT/operational technology environments.
• CISSP certification.
• A recognised security architecture credential (such as SABSA or comparable).
• An industrial/operational-technology-focused security certification (for example GICSP or similar).
• Hands-on experience assessing security weaknesses and building mitigation approaches for networked systems.
• Working knowledge of established security frameworks (e.g. NIST, ISO).
• Experience supporting and driving cyber risk management activities.
• Capability in eliciting and engineering security architecture requirements.
• Strong vendor management experience with an emphasis on outcome-based arrangements.
• Confident leader and influencer across internal and external stakeholders.
• Able to translate complex security concepts for non-technical audiences.
• Self-directed and dependable, comfortable working under pressure with limited oversight.
• Strong written and spoken command of English and Chinese.