Sr. Manager, Data & Cyber Security Governance, IT Security, IT

CLSA; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

CLSA is seeking a Data and Cyber Security Governance Lead in Hong Kong to drive cybersecurity and data governance initiatives. You will lead policy creation, risk assessment, and regulatory compliance across on-premise and cloud environments.

The role requires deep ServiceNow CMDB experience and strong stakeholder management. Mandarin is a plus as you collaborate with regional teams and regulators.

Qualifications

• Bachelor’s degree or higher in Computer Science or Software Engineering.
• 10+ years IT experience with minimum 5 years in ServiceNow CMDB implementation and management.
• Hands-on expertise in ITSM, ITOM, HAM, and SAM modules.
• Strong knowledge of ServiceNow Discovery, Service Mapping, I&R, and CSDM.
• Experience integrating CMDB with AWS and Azure cloud environments.
• Proficiency in JavaScript, REST/SOAP APIs, and MID Server configuration.
• Relevant ServiceNow certifications (CIS – Discovery, CIS – Service Mapping, CSDM Practitioner, CSA/CAD) are mandatory.
• Experience with governance and compliance in financial services.
• Familiarity with automation for CMDB health remediation.
• Fluent in English; Mandarin an advantage.
• Excellent stakeholder management and communication skills.

Responsibilities

• Revise the organization’s cyber security and data security framework, policies, standards, and procedures for cybersecurity and data handling.
• Establish, implement, and enforce a comprehensive governance framework aligning data management and protection with policies.
• Ensure infrastructure, systems and applications comply with laws and industry standards (GDPR, MAS, ISO 27001, NIST, Data Protection laws in China).
• Maintain audit readiness and respond to compliance assessments, inquiries, and regulator requests.
• Identify and prioritize cyber risks; build and deploy a data governance framework.
• Establish governance for the vulnerability management program with Application and Platform teams.
• Provide regular reports and dashboards on governance and compliance status.
• Ensure compliance with all company policies, training, and regulatory requirements.
• Establish cloud governance for multi-cloud strategy (AWS, Azure, Alibaba Cloud).
• Assist in managing the IT security portfolio at Citic Securities Intl.

Skills

ITSM

ITOM

HAM

SAM

ServiceNow CMDB

Discovery

Service Mapping

CSDM

REST APIs

JavaScript

MID Server

Cloud integrations

Stakeholder management

Education

Bachelor’s degree in Computer Science or Software Engineering

Tools

ServiceNow

AWS

Azure

Job description

Position Description

This role of Data and Cyber Security Governance Lead, IT Security based out Hong Kong, to lead and manage data and cybersecurity governance initiatives & projects.

Key Areas of Responsibilities

• Revise the organization’s cyber security and data security framework, policies, standards, and procedures for cybersecurity and data handling
• Establish, implement, and enforce a comprehensive governance framework that aligns with organization’s policies defining data management, data lifecycle, data protection and data leakage protection
• Ensure infrastructure, systems and applications adhere to laws, regulations and best industry standards (e.g., GDPR, MAS, ISO 27001, NIST, Data Protection laws in China)
• Maintain audit readiness and respond to compliance assessments, audit inquiries, client questionnaires, and regulator’s requests
• Identify, assess, and prioritize cyber risks to the organization. Build an effective cybersecurity and data management framework and deploy it
• Establish governance to organization’s vulnerability management program with Application and Platform teams
• Provide regular reports and dashboards on cybersecurity governance and compliance status
• Ensure full compliance to all company policies, required training and regulatory requirements
• Establish a cloud governance framework to manage CSI’s multi cloud strategy involving AWS, Azure, and Alibaba Cloud
• Assist to manage IT security portfolio at Citic Securities Intl

Requirements

• Bachelor’s degree or higher, in Computer Science or Software Engineering
• 10+ years of overall IT experience, with minimum 5 years in ServiceNow CMDB implementation and management
• Hands‑on expertise in ITSM, ITOM, HAM, and SAM modules
• Strong knowledge of ServiceNow Discovery, Service Mapping, I&R, and CSDM.
• Experience integrating CMDB with AWS and Azure cloud environments.
• Proficiency in JavaScript, REST/SOAP APIs, and MID Server configuration.
• Relevant ServiceNow certifications (CIS – Discovery, CIS – Service Mapping, CSDM Practitioner, CSA/CAD) are mandatory
• Experience with governance and compliance in financial services.
• Familiarity with automation for CMDB health remediation
• Fluent in both spoken and written English. Fluency in spoken and written Mandarin is an advantage
• Excellent stakeholder management and communication skills