Regional Head of Cybersecurity

Rise Associates Asia Limited; Hong Kong; On-site; HKD 1,200,000 - 1,800,000; Full time

Job summary

The ideal candidate has extensive IT security experience, relevant certifications, and strong communication skills in both Chinese and English. Industrial sector exposure is a plus, with a strategic leadership mindset while remaining technically hands-on.

Qualifications

• Degree or above in IT or related disciplines is required.
• Holder of recognized security certifications (e.g., CISSP, CISA, CISM, CEH, OSCP, CCSP) is preferred.
• >12 years of IT security experience, with OT cybersecurity being advantageous.
• Strong knowledge of industry IT security standards (ISO 27001, GDPR, PIPL).

Responsibilities

• Oversees IT security operations and inspects security controls and policies.
• Leads IT security governance, policies, workflows, and compliance activities.
• Manages incident response and remediation actions.
• Evaluates latest cyber threats and technology landscape to introduce relevant cybersecurity solutions.
• Leads penetration testing and vulnerability management programs.
• Keeps leadership informed with threat updates and recommendations.
• Collaborates with technology teams to assess new technologies via security reviews.

Skills

Technical leadership

IT security operations

Security governance

Communication

Bilingual Chinese/English

Threat intel awareness

Education

Bachelor's degree in IT or related disciplines

Job description

Summary:

Our client is a well-recognized industrial company, with stronggeographicalfootprint across APAC, and has business precense acrossmanufacturing, supplychain and logistics industries. As a brand new group-level role, this Regional Head of Cyberscurityserves as atechnical leadership rolewith a few immediate prioritizes to delivery, which includes to build an incident responseteam/external SOC extension, define group-level and country-level security operating mechansim & standards, and to cultivate a cybersecuritymindset across all business departments.This role reports into the group's CTO and will collaborate closely with IT teams at country-level.

Responsibilities:

• IT security operations
• IT security governance & controls, compliance, policies & workflows
• Incident response and remediation actions
• Evaluation of latest cyber threat & technology landscape, to introduce relevant cybersecurity solutions to implement in the company
• Lead regular peneration testing and vulnerability management activities
• Keep management committe udpated with latest securirty threats and provide associated advices/ recommendations
• Assisst with other technology members to evaluate newadoption of emerging technology (i.e. via throughout security reviews of new applications/ systems)

Requirements:

• Degree or above in IT or related disciplines
• Holder of recognized security certifications, e.g. CISSP, CISA, CISM, CEH, OSCP, CCSP
• With a minimal 12+ years’ IT security experience. Cybersecurity in OT (Operational Technology) is advantagous
• Demonstrate strong knowledge of industry recognized IT security standards (i.e. ISO 27001, GDPR, PIPL, etc.)
• Experience gained from industrial industries, such as manufacturing, logistics, supplychain, energy, etc.
• A technical leader who is still technical strong
• Strong communication and presentation skills, with a logical personality
• Good command of spoken and written Chinese and English