Senior Manager, Information Technology (IT Security & Operations)

CUHK Medical Centre Limited; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

CUHK Medical Centre Limited seeks a Senior Manager, Information Technology (IT Security & Operations) to lead security governance, assurance and 24x7 service operations across infrastructure and applications.

The role requires a bachelor’s degree in a related field, advanced information-security certifications and at least 12 years’ IT experience including leadership in regulated healthcare environments. Strong collaboration with governance committees is essential.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related discipline.
• CISSP, CISM, CISA, or CISP certification required.
• Minimum 12 years of IT experience with 5 years in leadership roles.
• Experience in mission-critical, high-availability or regulated environments; healthcare experience is an advantage.
• Solid IT security and operations experience including incident management, business continuity, vulnerability management.
• Experience in leading IT operations teams and managing service providers/vendors.

Responsibilities

• Lead IT security governance and operations across portfolios.
• Establish security policies, controls, and reporting aligned with regulatory requirements.
• Oversee 24x7 monitoring and service operations; coordinate incident response and remediation.
• Coordinate risk assessments, vulnerability assessments, audits, drills, and compliance submissions.
• Report security posture and performance to governance committees.

Skills

Leadership

Stakeholder management

Communication

Analytical skills

Problem-solving

English & Chinese proficiency

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Systems

CISSP / CISM / CISA / CISP certification

Job description

Job Description - Senior Manager, Information Technology (IT Security & Operations) (IT-26-0270)

Senior Manager, Information Technology (IT Security & Operations) - ( IT-26-0270 )

Key Responsibilities

Lead IT security governance, assurance and IT service operations. Establish security policies, cybersecurity frameworks, standards, controls and reporting aligned with hospital risks, best practices and relevant regulatory requirements

Act as the internal security control and assurance function for infrastructure and application portfolios. Review security health, configuration, access, vulnerabilities, patches, logs and remediation. Defines security requirements, monitors compliance, challenges exceptions, validates remediation and escalates unresolved risks

Supervise and develop the IT operations team. Provide integrated 24 x 7 monitoring and service operations for infrastructure and applications. Lead incident triage, escalation, containment coordination, service restoration coordination, root-cause review and follow-up actions with the responsible IT teams and service providers

Coordinate risk assessments, vulnerability assessments, penetration tests, audits, drills, training and compliance submissions. Report security posture, service performance, risks and actions to relevant governance committees

Undertake other duties and ad hoc projects as assigned by supervisor

Job Requirements

Holder of a Bachelor’s Degree in Computer Scienc e, Cybersecurity, Inf ormation Systems, Engineering or a related discipline

Recognised information-security qualification such as CISSP, CISM, CISA or CISP is required. ITIL, ISO/IEC 27001, cloud security or business continuity certification is preferred

At least 12 years of relevant IT experience, including 5 years in a leadership role covering cyber security, infrastructure or IT operations

Experience in mission-critical, high-availability or regulated environments; healthcare experience is an advantage

Solid experience in IT security and operations, including incident management, business continuity, vulnerability management and security assurance

Experience in leading IT operations teams and managing service providers/vendors

Sound knowledge of cybersecurity governance, controls and operational resilience, with good understanding of relevant regulatory and privacy requirements

Familiarity with recognised cybersecurity, information security and IT service management frameworks and practices

Strong leadership , stakeholder management, communication, analytical and problem-solving skills

Good command of both written and spoken English and Chinese

Compensation and Employment Terms

We provide a unique employment experience for people seeking careers in hospital and healthcare industry; and offer competitive remuneration packages to the successful candidates. Appointment will be made on a 3-year contract with contract-end gratuity, renewable subject to good performance and mutual agreement.

Application Closing Date

8 November 2026

Personal Information Collection Statement

Data collected will only be used for job application processing. Applicants not contacted by CUHK Medical Centre Limited within eight weeks from the application closing date may assume their applications unsuccessful. All personal data collected will be retained not more than 12 months from the application closing date, and will be destroyed thereafter.