Manager / Assistant Manager, Security Services

CITIC Telecom International CPC Limited; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

CITIC Telecom International CPC Limited is seeking an experienced Lead Security Consultant to guide a team of security professionals in pre-sales engagements. You will design security solutions, review tender requirements, and estimate risk levels during bids.

The role requires strong cloud security, IAM/PAM, Zero Trust, and XDR/MDR expertise, with exposure to SOC/MSS offerings. Travel may be required for projects across regions.

Qualifications

• Degree in IT/CS or information security related discipline.
• Minimum 8 years in IT with 5 years in information security; familiarity with pre-sales/tender procedures.
• Strong knowledge of cloud security, IAM/PAM, ZTNA, SASE, and SOC/MSS offerings.
• Familiarity with security regulations and frameworks (ISO/IEC, NIST, PCI-DSS, GDPR).
• Professional certifications such as CISSP, CISA, CISM are pluses.

Responsibilities

• Lead a team of security consultants for pre-sales activities and tender reviews.
• Design and propose security solutions to meet customer needs; assess risk levels during bids.
• Monitor evolving cybersecurity threats and translate insights for product teams.
• Advise on modern security architectures including zero trust, SASE, IAM/PAM, and XDR/MDR.
• Collaborate with Sales, Legal, and Product to drive security programs and governance.
• Participate in audits for ISO27001/27017/ISO27001 and related certifications.
• Provide strategic advisory on cyber threats and mitigation strategies.
• Represent the company in security forums and deliver awareness trainings.
• Travel may be required depending on project engagements.

Skills

Security architecture

Pre-sales

Stakeholder management

Risk assessment

Tender procedures

Product feedback

Regulatory & compliance

Threat intelligence

Leadership

Communication

Education

Bachelor's degree in IT/CS or InfoSec

CISSP

CISA

CISM

Tools

SIEM/SOAR

XDR/MDR

Cloud security tooling (AWS/Azure/GCP)

Identity & Access Management tools

Zero Trust & SASE tooling

Job description

• Lead a team of security consultants to perform pre-sales activities, design and propose security solutions to meet customer’s needs, include performing tender review and risk level estimation during bid process; Act as an escalation point for pre-sales support; Drive the team to increase productivity and efficiency.
• Continuously monitor and analyze cybersecurity trends, evolving threat landscape (e.g. ransomware, supply chain attacks, AI-driven threats), and customer needs; translate insights into actionable recommendations and feedback to product team.
• Must be well familiar with compliance and/or regulatory requirements from security aspects in different countries/regions where company business operates.
• Provide comments and suggestions from technical aspect to internal parties for product creation, enhancement, maintenance, change, support and termination throughout a product life cycle.
• Work with Sales team to establish strategic programs of security products periodically.
• Work with Legal team to evaluate risk from technical aspects.
• Drive pre-sales solutioning in emerging security domains such as cloud security (CSPM, CWPP), Zero Trust architecture, identity and access management (IAM/PAM), and XDR/MDR services.
• Advise customers on modern security architectures including SASE, ZTNA, and secure access strategies.
• Support pre-sales and solutioning of Security Operations Center (SOC) and managed security service (MSS) offerings.
• Provide strategic advisory to customers on emerging cyber threats and mitigation strategies.
• Represent company as a speaker to promote security products, join security forums with industrial experts to share insights, and deliver awareness training to public.
• Participate in audits by internal and/or external auditors for company certification of ISO9001, ISO20000 and ISO27001.
• Supervise, guide and train subordinates; Conduct human resources planning to nurture talents for each subordinate to grow and develop in career path.

Job requirement:

• Degree holder in Information Technology, Computer Science or Information Security-related disciplines, or equivalent.
• Minimum 8-year experience in IT industry with 5-year in information security areas; Well familiar with pre-sales working model including experiences in handling tender procedures and requirements; Strong business acumen is necessary.
• Strong knowledge of modern security technologies, including but not limited to:
• Cloud security (AWS, Azure, GCP), CSPM, CWPP
• Identity and access management (IAM), Privileged Access Management (PAM)
• Zero Trust architecture, SASE, ZTNA
• Endpoint security, EDR/XDR, and MDR services
• SIEM / SOAR and security analytics platforms
• Data security (DLP, encryption, data governance)
• Experience in supporting cloud-based and hybrid security architectures is highly preferred.
• Familiarity with managed security services and recurring service models is an advantage.
• Understanding of DevSecOps and application security practices is a plus.
• Experience in Security Operations Center (SOC) architecture, operations, and platforms (e.g. SIEM, SOAR, XDR), with exposure to managed SOC or MSS offerings, is highly preferred.
• Experience working with China-based customers or organizations is highly preferred, with familiarity in China enterprise practices and exposure to China-based security solutions and vendors.
• Good understanding in cyber security regulations and frameworks, e.g. ISO27001/27017/42001, NIST, PCI-DSS, MKMA requirements, China’s Cybersecurity Law, PDPO, GDPR.
• Professional qualifications such as CISSP, CISA, CISM, CISP and other additional related certifications are a plus.
• ISO27001 and ISO20000 (ITIL) qualifications are a plus.
• Strong stakeholder management skills with the ability to engage both technical and business stakeholders.
• Ability to articulate and position security solutions in terms of business value and risk management.
• Outstanding decision-making, problem-solving and crisis handling skills.
• Energetic, motivated, and achievement-oriented.Able to maintain a good staff morale.
• Travel may be required depending on the specific engagement of projects.
• Fluent in both spoken and written English, Cantonese and Mandarin; Expectionally good command of Mandarin, both oral and written.