Senior IT Security Assurance Lead – Pen Testing & Risk

Cathay Pacific Airways Limited; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Job summary

Cathay Pacific Airways Limited is seeking an IT Security Assurance Lead (Assessment and Penetration Test) on a 36-month contract in Hong Kong. You will shape security testing strategies, oversee risk assessments, and mentor a team across diverse IT projects.

Lead efforts to embed secure testing in delivery lifecycles, collaborate with internal security groups and business units, and stay ahead of evolving threats and standards such as OWASP and NIST.

Qualifications

• 5–7 years of relevant experience in IT security assurance and testing, with demonstrated experience leading small teams
• Certifications in penetration testing disciplines (OSCP, GWAPT, OSEP, OSWE, OSCE, CEH) or equivalent
• Expert knowledge of security-related attacks, testing methodologies, standards, and assessment tools
• Solid competencies in information security processes, frameworks, and technologies (vulnerability assessment, IT risk, pentesting)
• Working knowledge of OWASP, NIST, OSSTMM, and OSINT
• Strong experience in vendor management and oversight of third-party delivery quality
• Expert knowledge of security solutions and tools used in assurance and testing
• Strong communication skills and ability to present to senior audiences
• Proactive, analytical, customer-focused mindset and ability to drive positive outcomes

Responsibilities

• Lead IT risk and security assessments, including tracking and driving mitigation of identified issues
• Communicate residual risks, vulnerabilities, and noncompliance clearly to senior management and stakeholders
• Provide subject matter expertise in resolving reported security incidents and exception-based security requests
• Develop and maintain security assessment frameworks, methodologies, and control testing procedures
• Oversee and enhance security testing frameworks and processes across projects and BAU activities
• Manage and assure quality of vendor and internal testing against security requirements
• Prioritise and allocate testing resources to meet multiple project timelines based on risk and criticality
• Mentor and manage team members, supporting capability development
• Monitor evolving security threats, standards, and operating environments
• Collaborate across teams to improve testing methodologies and deliver training

Job description

Cathay Pacific Airways Limited is seeking an IT Security Assurance Lead (Assessment and Penetration Test) on a 36-month contract in Hong Kong. You will shape security testing strategies, oversee risk assessments, and mentor a team across diverse IT projects.

Lead efforts to embed secure testing in delivery lifecycles, collaborate with internal security groups and business units, and stay ahead of evolving threats and standards such as OWASP and NIST.