Senior Cyber Security & Compliance Engineer

KOJO Institute; Hong Kong; On-site; HKD 600,000 - 1,200,000; Full time

Benefits offered by this job

Accessibility assistance

Job summary

Deloitte China in Hong Kong invites applications for a Senior Engineer in Cyber Security & Compliance within IT Services. You will lead security operations, governance, and compliance work across the Hong Kong practice, including ISO standards and regulatory engagements.

You will work with cross‑functional teams to manage vulnerabilities, audit findings, and incident response, while maintaining the ISMS and BCMS. Fluent English and strong stakeholder communication are essential.

Qualifications

• Bachelor's degree or above in Computer Science, Information Security, Information Systems, or related discipline.
• Minimum 3 years of experience in information security, spanning security operations and governance/compliance in regulated environments.
• Hands-on experience with enterprise security operations tooling such as vulnerability management platforms, PAM, IAM, and email security gateways.
• Experience operating or auditing ISO/IEC 27001 ISMS; exposure to ISO 22301 strongly preferred.
• Familiarity with Hong Kong PDPO, HKMA/SFC risk and outsourcing requirements.

Responsibilities

• Run security operations for HK practice, including vulnerability management, PAM, IAM, and phishing/email threat response.
• Own and maintain HK information security and business continuity management systems (ISO 27001, ISO 22301).
• Plan internal/external security audits and drive remediation of findings.
• Respond to client due diligence, third-party risk assessments, and regulator inquiries timely.
• Represent HK firm in client security reviews and on-site assessments.
• Provide incident response coverage for HK/Macau practices and maintain BC/IR plans.

Skills

Vulnerability management

Security operations

Governance & compliance

Incident response

Regulatory awareness

Stakeholder communication

Cloud security

English proficiency

Education

Bachelor's degree in Computer Science or Information Security

Tools

PAM

IAM

ISO 27001 ISMS

Job description

Deloitte China in Hong Kong invites applications for a Senior Engineer in Cyber Security & Compliance within IT Services. You will lead security operations, governance, and compliance work across the Hong Kong practice, including ISO standards and regulatory engagements.

You will work with cross‑functional teams to manage vulnerabilities, audit findings, and incident response, while maintaining the ISMS and BCMS. Fluent English and strong stakeholder communication are essential.