Manager - Cybersecurity

Cyberport Hong Kong; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Cyberport Hong Kong is seeking a seasoned cybersecurity specialist to report to the Chief Information Security Officer. You will formulate the strategy and roadmap to safeguard information assets and manage cyber and technology risks, and develop governance, policy, standards and procedures aligned with industry best practices.

You will deploy security controls across ICT infrastructure, conduct resilience assessments, monitor security events, and coordinate with stakeholders on incidents.

Qualifications

• Minimum 6 years' hands-on cybersecurity experience in a large organisation.
• Experience in resilience assessment and security governance.
• Proficient with security tools and controls including SIEM, firewalls, and vulnerability scanners.
• Bachelor’s degree in cybersecurity or ICT; professional certifications preferred (CISM, CISSP, etc.).
• Strong communication skills in English and Chinese.

Responsibilities

• Report to the CISO and formulate cyber strategy and roadmaps.
• Develop and maintain cybersecurity governance, standards and procedures.
• Implement security controls across ICT infrastructure and endpoints.
• Conduct regular resilience assessments and monitor control effectiveness.
• Deploy and manage security tools (firewalls, IDS/IPS, SIEM).
• Collaborate with cross-functional teams to embed security in projects.
• Lead incident response and coordinate with stakeholders.
• Deliver security awareness training and management reporting.

Skills

Cyber risk assessment

Security architecture

Threat monitoring

Bilingual English/Chinese

Stakeholder communication

Education

Bachelor's degree in cybersecurity / ICT

CISM

CISSP

CCSP

Tools

SIEM

IDS/IPS

Vulnerability scanners

Firewalls

Encryption

Job description

• Report to Chief Information Security Officer (CISO)
• Formulate strategy and roadmap of cybersecurity management to safeguard information assets and protect against cyber and technology risks.
• Develop, implement and maintain cybersecurity governance, policy, standards and procedures that align with industry standards, frameworks and good practices.
• Implement and manage effective security controls and measures to secure ICT infrastructure, systems, networks, storage and endpoints.
• Conduct regular cybersecurity resilience assessment to evaluate the control effectiveness and identify weaknesses to maintain the maturity and capability of the defined security posture.
• Deploy and manage security tools and technologies such as firewalls, intrusion detection systems, anti-malware software and encryption mechanisms.
• Collaborate with cross-functional teams to integrate security controls into new and existing ICT systems and projects.
• Stay updated on emerging cybersecurity threats, trends, and technologies to proactively mitigate risks and enhance security posture.
• Monitor and analyse security events and alerts to detect and respond to security incidents and breaches.
• Respond to cybersecurity incidents and breaches by implementing incident response procedures and coordinating with relevant stakeholders.
• Perform ICT outsourcing security assessment to mitigate cyber and technology risks and recommend appropriate remediation actions whenever appropriate.
• Conduct security awareness training and education programs for employees to promote cybersecurity awareness and best practices.
• Prepare management information, key risk indicators and reports related to cybersecurity activities to facilitate management decision making

Requirements

• 6+ year proven experience as a cybersecurity specialist or similar role.
• Experience of formal cybersecurity resilience assessment, associated methodology, processes and good practices.
• Experience with security techniques and tools such as firewalls, intrusion detection systems, anti-malware software, SIEM solution and vulnerability scanners.
• Bachelor's degree or above in cybersecurity, information and communication technology related fields.
• Industry recognized qualifications such as CISM, CISSP, CEH, CCSP and CCSK are desirable.
• Proficiency in cybersecurity architecture, frameworks and standards, with a strong understanding of security principles, technologies and best practices of cyber safeguard and defence.
• Good knowledge of cyber threat monitoring, analysis and prevention, and relevant techniques and tools to respond and protect against cybersecurity incidents and breaches.
• Good technical knowledge and understanding of the cybersecurity impacts for adopting new and existing technologies.
• Good interpersonal skills to be able to communicate, influence and negotiate with various stakeholders.
• Ability to self-start and take ownership of assigned tasks and projects.
• Proficiency in written and spoken English and Chinese.

Applicants who do not hear from us by 30 September 2026 may assume that their applications are unsuccessful.

Further information about the Cyberport is available at https://cyberport.hk/

Personal data collected will be treated in the strictest confidence and only be used for recruitment-related purpose.