About the Role
The role sits within the IT Division's Cyber Security Department, which safeguards information assets, IT systems, networks and cloud platforms while ensuring the resilience and continuity of critical operations. As the first line of defence, the department identifies and addresses vulnerabilities, protects sensitive information, ensures rapid incident response, oversees access management, and promotes Club-wide cybersecurity awareness. The role monitors and assesses geopolitical developments, cyber threats and adversary activity relevant to Hong Kong and Greater China, producing actionable cyber threat intelligence to support defensive operations.
Key Responsibilities
- Monitor and assess geopolitical developments, cyber threats and adversary activity relevant to Hong Kong and the Greater China region, identifying emerging threats and trends that may affect the Club, its operations or its technology environment.
- Apply established cyber threat intelligence principles, analytical methodologies and intelligence tradecraft standards to assess threats in a commercial or public sector environment, and evaluate the reliability, relevance and potential impact of intelligence from internal and external sources.
- Collect, validate, analyse and convert raw cyber threat data into actionable intelligence, and produce written assessments, intelligence reports, indicators of compromise and tactical intelligence data to support defensive operations, ensuring products are accurate, timely
- Relevant and tailored to intended audiences.
- Research and assess regional cyber adversaries, advanced persistent threat groups and associated campaigns, analysing adversaries' motivations, capabilities, targets, infrastructure and operational patterns, and assess the relevance and potential impact of adversary activity on the Club.
- Identify and evaluate adversary tactics, techniques and procedures relevant to Hong Kong, Greater China and the Club's operating environment, mapping observed adversary behaviours to frameworks such as MITRE ATT&CK.
- Use recognised analytical models and frameworks, including MITRE ATT&CK, the Pyramid of Pain, the Diamond Model and the Cyber Kill Chain, to structure intelligence analysis, understand adversary behaviour and support threat-informed defensive decision-making.
- Evaluate information security and information technology threats, attacks and vulnerabilities, determining their relevance, severity, likelihood and potential impact on the Club, and provide risk-based recommendations to support appropriate prioritisation and remediation.
- Apply knowledge of computer network protocols and operations to identify, interpret and assess suspicious or malicious activity, and correlate network-based observations with other intelligence sources to identify potential threats, campaigns or adversary behaviours.
- Translate intelligence findings into practical defensive strategies, security control recommendations, detection opportunities and prioritised actions, supporting cybersecurity operations, incident response, threat hunting, vulnerability management and security engineering teams
- And recommend measures to harden systems, reduce the attack surface and disrupt adversary activity.
- Create concise briefings, presentations, reports and other intelligence products for technical and executive audiences, clearly communicating threat analysis, emerging trends, potential impacts, defensive strategies and recommended priorities
- Present cyber threat intelligence assessments to technical teams, business stakeholders and executive leadership, and support the integration of threat intelligence into defensive controls, operational processes and security priorities to improve security monitoring, detection
- Prevention and response capabilities.
Required Experience & Qualifications
- A high school diploma or a bachelor's degree in any discipline from an accredited educational institution.
- Two to five years of relevant professional experience in cybersecurity.
- At least one year of specialised experience in cyber threat intelligence.
- Experience in geopolitical and cyber threat intelligence relating to Hong Kong and Greater China.
- Experience applying cyber threat intelligence analysis principles within a public sector or commercial environment.
- Experience creating and delivering concise briefings, presentations and reports to technical teams and executive leadership.
- Ability to communicate threat analysis, emerging trends, impacts on potential targets, defensive strategies and recommended priorities.
- Knowledge of information security and information technology threats, attacks and vulnerabilities within a cybersecurity context.
- Knowledge of cyber adversaries associated with Hong Kong and Greater China, including their tactics, techniques and procedures.
- Ability to convert raw cyber threat data into actionable intelligence in both written narrative and tactical data formats.
- Ability to apply recognised intelligence analysis tradecraft standards.
- Knowledge of computer network protocols and operations.
- Knowledge of advanced persistent threats, threat actors and cyber campaigns.
- Knowledge of analytical threat models and frameworks, including MITRE ATT&CK, the Pyramid of Pain, the Diamond Model and the Cyber Kill Chain.
- Excellent verbal and written communication, problem-solving and analytical skills.
Preferred Skills
- Relevant cybersecurity or cyber threat intelligence certifications, including CPTIA (CREST Practitioner Threat Intelligence Analyst), CRTIA (CREST Registered Threat Intelligence Analyst), C|TIA (Certified Threat Intelligence Analyst)
- RCIA (Rocheston Cyberthreat Intelligence Analyst) or GCTI (GIAC Cyber Threat Intelligence).
Salary
Benefits & Perks
- Competitive benefits package
- Dynamic working environment
- Development opportunities
About the Company
The Hong Kong Jockey Club is a world-class racing club founded in 1884 that acts continuously for the betterment of society. It has a unique integrated business model comprising racing and racecourse entertainment, a membership club, responsible sports wagering and lottery, and charities and community contribution. Through this model, the Club generates economic and social value for the community and supports the HKSAR Government in combatting illegal gambling.