Security & Risk Operations Lead

Lever, Inc.; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Lalamove is seeking an experienced Office Security Strategy Operations lead in Hong Kong to shape and oversee daily policy configuration, monitoring, and incident response for our office security stack. You will drive data classification policies, conduct risk audits, and collaborate with Legal, Compliance, HR, IT, and GRC to ensure global data protection regulations are met.

Fluency in English and Mandarin, CISA/CISSP credentials, and a track record in cross-border security operations are

Qualifications

• Bachelor's degree or higher in Information Security, Cybersecurity, or related field.
• 5+ years in data security or information security.
• Familiar with office network security architecture and data security policies for endpoints, networks, and email.
• Certified information security professionals (CISA or CISSP) preferred.
• Strong cross-functional communication and overseas/going-global security experience.

Responsibilities

• Lead daily policy configuration, operations monitoring, and alert handling for office security software (DLP, IM, encryption).
• Drive implementation of data classification and grading policies in office scenarios.
• Establish and operate an employee data security risk monitoring system and conduct risk assessments and governance.
• Collaborate with Legal, Compliance, HR, IT, and GRC to establish security frameworks and global data protection compliance.
• Deliver employee information security awareness training and communications.

Skills

Data security

Information security

English

Mandarin

CISA

CISSP

Cross-border collaboration

Education

Bachelor's degree or above

Tools

DLP systems

UEBA

Encryption software

Job description

Lalamove is seeking an experienced Office Security Strategy Operations lead in Hong Kong to shape and oversee daily policy configuration, monitoring, and incident response for our office security stack. You will drive data classification policies, conduct risk audits, and collaborate with Legal, Compliance, HR, IT, and GRC to ensure global data protection regulations are met.

Fluency in English and Mandarin, CISA/CISSP credentials, and a track record in cross-border security operations are