Manager - Cybersecurity (Foreign Bank)

All Star Agency; Hong Kong; Hybrid; HKD 900,000 - 1,300,000; Full time

Job summary

All Star Agency in Hong Kong is seeking an experienced Manager – Cybersecurity (Foreign Bank) to strengthen the bank’s cyber defense posture and ensure security controls meet regulatory and group standards. You will lead security assessments, policy design, and incident response within a small, specialist cybersecurity team.

You will coordinate assessments, develop and update policies, oversee security technologies, and drive vulnerability management and security awareness to protect critical

Qualifications

• Degree in IT, Cybersecurity or related discipline.
• 8+ years in IT industry with 5+ years in cybersecurity or IT risk management.
• Hands-on experience supporting security assessments and operating security systems and controls.
• Banking experience and HKMA guidelines familiarity preferred.
• Professional qualifications such as CISA, CISM, CISSP or HKMA ECF-C-recognized certifications are an advantage.
• Excellent communication, analytical and problem-solving skills.
• Fluent in English and Cantonese; Mandarin would be an added advantage.

Responsibilities

• Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are documented, tested and improved where necessary.
• Develop, maintain and update cybersecurity policies, standards and guidelines, aligning them with group requirements and local regulatory expectations (e.g. HKMA).
• Oversee the implementation and day‑to‑day operation of security technologies and controls, working with infrastructure and application teams to ensure effective protection.
• Plan, drive and track security hardening and vulnerability management activities, including remediation follow‑up and reporting to management.
• Promote cybersecurity awareness and a strong security culture across the organization through communication, training and engagement initiatives.
• Monitor cyber threat intelligence, market trends and emerging risks, and support incident management, response and reporting for cyber events.

Skills

Security assessments

Security controls

Cybersecurity

IT risk management

Communication

Analytical

Education

Degree in IT/Cybersecurity

Tools

Security technologies

Security operations

Job description

Join the Security & Architecture Group in Hong Kong as Manager – Cybersecurity (Foreign Bank), helping to strengthen the bank’s cyber defense posture and ensure security controls meet regulatory and group standards. You will play a key role in security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small, specialist cybersecurity team.

Key Responsibilities

• Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are properly documented, tested and improved where necessary.
• Develop, maintain and update cybersecurity policies, standards and guidelines, aligning them with group requirements and local regulatory expectations (e.g. HKMA).
• Oversee the implementation and day‑to‑day operation of security technologies and controls, working with infrastructure and application teams to ensure effective protection.
• Plan, drive and track security hardening and vulnerability management activities, including remediation follow‑up and reporting to management.
• Promote cybersecurity awareness and a strong security culture across the organization through communication, training and engagement initiatives.
• Monitor cyber threat intelligence, market trends and emerging risks, and support incident management, response and reporting for cyber events.

Requirements

• Degree in IT, Cybersecurity or a related discipline.
• Minimum 8 years’ experience in the IT industry, including at least 5 years in cybersecurity and/or IT risk management.
• Hands‑on experience supporting security assessments and implementing or operating security systems and controls.
• Banking experience and familiarity with HKMA cybersecurity and technology‑risk guidelines are preferred.
• Professional qualifications such as CISA, CISM, CISSP or HKMA ECF‑C‑recognized certifications are an advantage.
• Able to work independently with strong communication, analytical and problem‑solving skills.
• Fluent in English and Cantonese; Mandarin would be an added advantage.

If you are an experienced cybersecurity professional looking to take on an AVP‑level role in a focused IT Security Group,