Security Engineering Lead & Cloud Risk Manager

Bowtie Life Insurance Company; Hong Kong; On-site; HKD 1,000,000 - 2,000,000; Full time

Benefits offered by this job

Competitive package

Flexible work arrangement

Medical/dental coverage

Employee discounts

Professional Development Sponsorship

Job summary

Bowtie Life Insurance Company is seeking a hands‑on Security Lead to own Hong Kong’s first virtual insurer security posture end‑to‑end. You will drive security monitoring, IAM, PAM, and cloud security across AWS, coordinating with SRE/IT and auditors.

You will shape incident runbooks, governance, and partner relationships while ensuring compliance with HK regulatory requirements. Cantonese preferred but not required.

Qualifications

• SDLC integration and supply‑chain risk expertise.
• AWS IAM, GuardDuty, CloudTrail, and KMS experience.
• End‑to‑end SIEM deployment experience.
• Implementation of PAM and privileged access workflows.
• Identity: IdP, SSO, SCIM proficiency.
• Strong written English for policy/regulator docs.
• Exposure to HK financial services regulatory context.
• Framework knowledge (NIST CSF 2.0, ISO/IEC 27001) is a plus.
• CNAPP/EDR/vulnerability tooling familiarity a plus.
• Google Workspace admin and MDM/BYOD familiarity is a plus.
• Automation mindset using Python/TypeScript.
• Certifications welcomed, hands‑on evidence preferred.

Responsibilities

• Own security monitoring and alert triage end‑to‑end.
• Design PAM and identity architecture for production systems.
• Integrate security into SDLC and manage cloud posture.
• Maintain risk register and track remediation actions.
• Lead audits, regulatory reviews, and partner security assessments.

Skills

Security Monitoring

PAM & IAM

Cloud Security

Identity Management

Python/TypeScript

Regulatory Knowledge

Certs welcome

Vulnerability Mgmt

SIEM Experience

Audits & Governance

Tools

AWS

SIEM

PAM tools

Job description

Bowtie Life Insurance Company is seeking a hands‑on Security Lead to own Hong Kong’s first virtual insurer security posture end‑to‑end. You will drive security monitoring, IAM, PAM, and cloud security across AWS, coordinating with SRE/IT and auditors.

You will shape incident runbooks, governance, and partner relationships while ensuring compliance with HK regulatory requirements. Cantonese preferred but not required.