Manager or Senior Manager, Information Security

Private Client Services Limited; Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

Private Client Services Limited is seeking a Senior Manager, Information Security to formulate, implement, and manage cyber security strategies, policies and risk management across the organization in Hong Kong. The role requires deep expertise in policy development, security assessments, incident response, and advanced security domains, with strong stakeholder engagement.

The ideal candidate will lead cross-functional teams, align security with regulatory standards (MAS, HKIA, GDPR), and drive

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related discipline.
• Minimum 6 years of professional experience in IT security, cyber security, risk management, or governance.
• Experience with regulatory frameworks such as MAS, HKIA, PDPO, GDPR preferred.

Responsibilities

• Formulate, manage, and maintain cyber security policies, standards, and procedures.
• Plan and conduct IT risk evaluations covering controls and access management.
• Lead security assessments across cloud, on-prem, and endpoints.
• Support incident response operations and cross-country drills.
• Oversee security operations and SOC optimization.

Skills

Cyber security

Risk management

Incident response

Regulatory compliance

Security architecture

Leadership

Strategic thinking

Threat intelligence

Education

Bachelor's degree in Computer Science, Information Systems, or related discipline

Job description

We are seeking an experienced Senior Manager, Information Securityspecializing in Information Security to join our organization. This role is critical in formulating, implementing, and managing comprehensive cyber security strategies, policies, and risk management initiatives. The successful candidate will serve as a subject matter expert, driving security excellence across the organization while ensuring compliance with regulatory requirements and industry standards.

We will count on you to:

Policy and Strategy Development

• Formulate, manage, and maintain cyber security policies, standards, and procedures aligned with corporate governance framework
• Assist in planning and execution of technology-related risk management strategies, processes, and comprehensive work plans
• Research and evaluate latest security threats and cyber threat intelligence to inform strategic direction
• Stay informed about emerging developments in the cyber security field and emerging technologies

Security Assessment & Implementation

• Plan and conduct comprehensive cyber security assessments and IT risk evaluations covering:
• IT general controls and information asset management
• Access controls and identity management
• Cloud, server, endpoint, network, and middleware security reviews
• Database and application security assessments
• Participate in design, development, and implementation of cyber security projects
• Support implementation of security initiatives to ensure compliance with corporate information security policies and regulatory standards
• Conduct or participate in penetration testing, red/blue/purple team exercises, and vulnerability assessments for local and overseas entities
• Validate controls and ensure effective remediation of identified vulnerabilities

Incident Response & Security Operations

• Provide cyber security incident response operations and support
• Collaborate with local and regional SOC teams for continuous improvement in:
• Daily cyber security monitoring
• Incident analysis and investigation
• Incident response operations and support
• Arrange and coordinate cross-country cyber incident response drills and exercises
• Support threat hunting, malware analysis, and digital forensics activities

Advanced Security Domains

• Manage and oversee security operations including SOC management and optimization
• Support offensive security initiatives and penetration testing programs
• Contribute to container security, cloud security posture management (CSPM), and attack surface management
• Participate in threat modeling and supply chain cybersecurity assessments
• Monitor and manage Cloud/ISP/On-premises Anti-DDoS solutions
• Support AI/LLM security initiatives and emerging technology assessments
• Maintain OSINT capabilities and dark web monitoring programs
• Oversee vulnerability management and digital forensics operations

Subject Matter Expertise & Business Engagement

• Serve as subject matter expert for cyber security matters across the Organization
• Support business units and cross-functional teams in identifying and addressing cybersecurity risks
• Engage with various departments to discuss risk issues, control gaps, and propose effective remediation strategies
• Provide cyber security guidance and recommendations to senior management and business stakeholders
• Demonstrate proficiency and stay current with key security technologies including:
• Network Security: Firewall, IDS/IPS, WAF, DNS Security, SASE/SSE Solutions
• Monitoring & Analytics: SIEM, SOAR, XDR, UEBA, BAS, DLP
• Email & Data Security: Email Security, DLP, Database Security
• Advanced Technologies: Zero Trust Architecture, Micro-segmentation, Unified Endpoint Management, Deception Technologies
• AI/ML Security: Generative AI, Machine Learning, LLM/MCP/RAG libraries (Python application), AI/ML security implications
• Cloud Security: Endpoint management, cloud access security, cloud-native security

Regional & Travel Responsibilities

• Willing to travel to overseas regions occasionally to:
• Conduct regional cyber security assessments
• Provide cyber security incident response support
• Participate in training programs and red team exercises
• Target regions: Asia Pacific area, Singapore, Taiwan, Shenzhen, Shanghai, and other key business regions

What you need to have:

• Bachelor's degree in Computer Science, Information Systems, or related discipline
• Minimum 6 years of professional experience in one or more of the following domains:
• IT security and cyber security
• Technology risk management
• IT compliance and audit
• Information security governance
• Familiarity with MAS (Monetary Authority of Singapore), HKIA (Hong Kong Insurance Authority), and regulatory frameworks including but not limited to:
• PDPO (Personal Data (Privacy) Ordinance)
• GDPR (General Data Protection Regulation)
• China privacy law and regulations
• Other security risk management frameworks and regulatory requirements
• Experience in compliance auditing and regulatory assessments is advantageous

What makes you stand out?

• Strong knowledge of cyber security best practices, frameworks, and standards
• Hands-on experience with security assessment methodologies and tools
• Understanding of threat landscape, attack vectors, and defense mechanisms
• Proficiency in security operations and incident response procedures
• Independent thinker with strong self-initiative and drive
• Passionate about cyber security as a professional discipline
• Strategic mindset with ability to translate business needs into security solutions
• Commitment to continuous learning and professional development
• Excellent written and verbal communication skills
• Strong interpersonal and relationship management abilities
• Ability to work effectively across organizational boundaries
• Skilled at engaging with both technical and non-technical stakeholders
• Strong problem-solving and analytical capabilities
• Fluent in English (written and spoken) – Required
• Mandarin Chinese (written and spoken) - Preferred

Preferred Qualifications

• Experience in managing Security Operations Centers (SOCs)
• Background in offensive security and penetration testing
• Hands-on experience with cloud security and SASE solution
• Experience with cloud security platforms and CSPM tools
• Multi-country compliance and regulatory experience
• Background in third party risk assessment and supply chain security assessments

PCS is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people regardless of their sex/ gender, marital or parental status, ethnic origin, nationality, age, background, disability, sexual orientation, and gender identity.