Senior Cybersecurity Engineer: Enterprise Security & Risk

ConnectedGroup; Hong Kong; On-site; HKD 500,000 - 900,000; Full time

Job summary

ConnectedGroup is seeking a Cybersecurity Engineer to join its Information Security team. The role focuses on security engineering, vulnerability management, controls implementation, risk mitigation and incident response support across the technology landscape.

The successful candidate will work with infrastructure, cloud, application, risk, and business teams to embed security best practices and drive improvements in security controls and monitoring.

Qualifications

• Bachelor's degree in Computer Science, Information Security, IT, or related field.
• 5–8 years of experience in Cybersecurity, Information Security, IT Security, or Technology Risk.
• Hands-on experience with security controls deployment, vulnerability management, and assessments.
• Familiarity with NIST, ISO 27001, CIS Controls, or equivalent.
• Experience supporting audits, compliance reviews, and regulatory assessments is a plus.
• Strong analytical and problem-solving skills; ability to communicate with technical and non-technical stakeholders.
• Fluency in English and Cantonese; Mandarin would be an advantage.

Responsibilities

• Implement, maintain, and enhance cybersecurity technologies, tools, and security controls across the enterprise.
• Perform security assessments and support internal, regional, and regulatory security reviews.
• Drive vulnerability management activities, including risk assessment, remediation tracking, and security hardening initiatives.
• Monitor emerging cyber threats, security vulnerabilities, and threat intelligence to identify risks.
• Support cybersecurity incident response, investigation, containment, recovery, and reporting activities.
• Assist in developing and maintaining cybersecurity policies, standards, procedures, and technical baselines.
• Collaborate with infrastructure, cloud, and application teams to ensure secure technology design and implementation.
• Support security monitoring and operational activities to protect critical systems and data assets.
• Conduct security reviews of new technologies, projects, and systems to ensure compliance with security requirements.
• Deliver cybersecurity awareness initiatives and promote security best practices across the organization.
• Prepare security metrics, risk reports, and management updates for key stakeholders.

Skills

Network Security

Identity & Access Management

Security Monitoring

Threat Management

Security Controls

Vulnerability Management

Incident Response

English Cantonese

Education

Bachelor's degree in Computer Science, Information Security, IT

Tools

SIEM

EDR

Vulnerability Scanners

DLP

Job description

ConnectedGroup is seeking a Cybersecurity Engineer to join its Information Security team. The role focuses on security engineering, vulnerability management, controls implementation, risk mitigation and incident response support across the technology landscape.

The successful candidate will work with infrastructure, cloud, application, risk, and business teams to embed security best practices and drive improvements in security controls and monitoring.