Strategic Deputy Head, Information Security

CLSA; Hong Kong; On-site; HKD 2,000,000 - 2,800,000; Full time

Job summary

CLSA is seeking a Deputy Head of Information Security based in Hong Kong to lead cybersecurity and data security governance, risk management, and regulatory compliance across CSI. The role oversees security operations, architecture oversight, and third-party risk in a multi-cloud environment including AWS, Azure, and Alibaba Cloud.

The candidate will report to the Head of Information Security, mentor cybersecurity professionals, and drive strategic security initiatives while enabling business

Qualifications

• Leadership in cybersecurity and data security governance, risk, and compliance.
• Experience building enterprise governance frameworks and data protection programs.
• Strong track record in regulatory compliance, audits, and third-party risk management.
• Exposure to security operations, incident response, and vulnerability management.
• Ability to lead multi-team initiatives and engage senior management.

Responsibilities

• Lead development and enhancement of cybersecurity and data security strategies, policies, and standards.
• Drive enterprise-wide governance for data management, protection, and DLP.
• Identify, assess, and report cybersecurity risks; drive mitigation.
• Provide regular risk, governance, and compliance reporting to executives and committees.
• Oversee SOC activities and vulnerability management in coordination with teams.
• Provide security oversight for architecture, cloud adoption, and technology transformation.
• Manage third-party cybersecurity risk and embedded security controls in engagements.
• Lead security awareness and cross-functional security initiatives.

Skills

Leadership

Governance

Risk management

Regulatory compliance

Security operations

Cloud security

Stakeholder management

Incident response

Education

Bachelor's degree or above in CS/Engineering

Tools

SIEM

WAF

IAM

Cloud platforms

Job description

CLSA is seeking a Deputy Head of Information Security based in Hong Kong to lead cybersecurity and data security governance, risk management, and regulatory compliance across CSI. The role oversees security operations, architecture oversight, and third-party risk in a multi-cloud environment including AWS, Azure, and Alibaba Cloud.

The candidate will report to the Head of Information Security, mentor cybersecurity professionals, and drive strategic security initiatives while enabling business