Strategic Cybersecurity Lead & Risk Manager

Leadingnation; Hong Kong; Hybrid; HKD 600,000 - 1,200,000; Full time

Job summary

Cyberport in Hong Kong is seeking an experienced cybersecurity professional to lead governance, strategy, and resilience efforts across ICT systems. You will oversee governance, policy development, and security controls while coordinating with cross-functional teams to embed secure practices.

The role requires strong understanding of security frameworks, threat monitoring, and incident response, with fluency in English and Chinese.

Qualifications

• Bachelor's degree or above in cybersecurity, information and communication technology related fields.
• Industry recognized qualifications such as CISM, CISSP, CEH, CCSP and CCSK are desirable.
• Proficiency in cybersecurity architecture, frameworks and standards, with a strong understanding of security principles.

Responsibilities

• Report to Chief Information Security Officer (CISO).
• Formulate strategy and roadmap of cybersecurity management to safeguard information assets and protect against cyber and technology risks.
• Develop, implement and maintain cybersecurity governance, policy, standards and procedures that align with industry standards, frameworks and good practices.
• Implement and manage effective security controls and measures to secure ICT infrastructure, systems, networks, storage and endpoints.
• Conduct regular cybersecurity resilience assessment to evaluate control effectiveness and identify weaknesses to maintain maturity of security posture.
• Deploy and manage security tools and technologies such as firewalls, IDS, anti-malware software and encryption mechanisms.
• Collaborate with cross-functional teams to integrate security controls into new and existing ICT systems and projects.
• Stay updated on emerging cybersecurity threats and trends to mitigate risks and enhance security posture.
• Monitor and analyse security events and alerts to detect and respond to incidents and breaches.
• Respond to cybersecurity incidents and coordinate with stakeholders.
• Perform ICT outsourcing security assessment to mitigate risks and remediation actions.
• Conduct security awareness training for employees to promote cybersecurity best practices.
• Prepare management information and risk indicators for cybersecurity activities.

Skills

Cybersecurity

Security governance

Threat monitoring

Incident response

Stakeholder communication

Education

Bachelor's degree in cybersecurity or ICT

CISM

CISSP

CEH

Tools

Firewalls

Intrusion detection

Anti-malware

SIEM

Vulnerability scanners

Job description

Cyberport in Hong Kong is seeking an experienced cybersecurity professional to lead governance, strategy, and resilience efforts across ICT systems. You will oversee governance, policy development, and security controls while coordinating with cross-functional teams to embed secure practices.

The role requires strong understanding of security frameworks, threat monitoring, and incident response, with fluency in English and Chinese.