Senior Cybersecurity Leader – Banking, Policy & Risk

ALL-STAR AGENCY; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

ALL-STAR AGENCY in Hong Kong is seeking an AVP - Cybersecurity to strengthen the bank’s cyber defence posture and ensure security controls meet regulatory and group standards. You will lead security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small specialist team.

The role requires a degree in IT/cybersecurity and 8+ years in IT with 5+ in cybersecurity, with English and Cantonese fluency; Mandarin

Qualifications

• Degree in IT, Cybersecurity or related discipline.
• 8+ years in IT, including 5+ years in cybersecurity or IT risk management.
• Hands-on in security assessments and implementing/operating security controls.
• Banking experience and HKMA guidelines familiarity preferred.
• Certifications such as CISA, CISM, CISSP or HKMA-recognised are a plus.
• Independent worker with strong communication, analytical and problem-solving skills.
• Fluent in English and Cantonese; Mandarin desirable.

Responsibilities

• Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are documented and tested.
• Develop, maintain and update cybersecurity policies, standards and guidelines aligning with group and local regulatory expectations (HKMA).
• Oversee implementation and day-to-day operation of security technologies and controls with infrastructure and application teams.
• Plan, drive and track security hardening and vulnerability management activities, including remediation and reporting to management.
• Promote cybersecurity awareness and a strong security culture across the organisation through communication and training.
• Monitor cyber threat intelligence and support incident management, response and reporting for cyber events.

Skills

Security assessments

Vulnerability management

Incident response

Policy design

Communication

Analytical thinking

Education

Degree in IT/Cybersecurity

Job description

ALL-STAR AGENCY in Hong Kong is seeking an AVP - Cybersecurity to strengthen the bank’s cyber defence posture and ensure security controls meet regulatory and group standards. You will lead security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small specialist team.

The role requires a degree in IT/cybersecurity and 8+ years in IT with 5+ in cybersecurity, with English and Cantonese fluency; Mandarin