About the Role
The role sits within the Cyber Security Department of The Hong Kong Jockey Club's IT Division, which safeguards information assets, IT systems, networks, and cloud platforms. The department acts as the first line of defence, protecting the Club against emerging threats and ensuring compliance with regulatory requirements in Hong Kong and China. The role focuses on embedding security controls into cloud and hybrid technology platforms and supporting the operation, governance, and improvement of cloud, platform, and network security services. It works with Security Architects, Infrastructure, Application, and Project teams to strengthen security across cloud platforms and digital services. It contributes to the Platform & Network Security roadmap in line with the Club's cyber security strategy and cloud adoption initiatives.
Key Responsibilities
- Ensure security controls are embedded into the design, implementation, and operation of the Club's cloud and hybrid technology platforms, including cloud workloads, containers, and supporting infrastructure.
- Ensure effective operation of cloud, platform, and network security controls and services in alignment with the Club's security policies and standards, and continuously identify security control gaps, misconfigurations, and improvement opportunities.
- Support the governance and administration of cloud security services and network security controls, including cloud-native security tools, web application firewalls, API security, DDoS protection, firewalls, and IDS/IPS technologies.
- Support the provision of cloud and platform security metrics, reports, risk insights, and service updates to IT and business stakeholders.
- Work with Security Architects, Infrastructure, Application, and Project teams to strengthen security controls across cloud platforms and digital services.
- Contribute to the delivery of the Platform & Network Security roadmap in alignment with the Club's cyber security strategy and cloud adoption initiatives.
- Support cloud security assessments, vulnerability remediation activities, security investigations, and implementation of security improvement initiatives.
- Undertake other duties assigned by Cyber Security Management.
- Participate in, contribute to, and help shape a diverse and inclusive culture with trust and respect; support cross-team, cross-division, and cross-departmental collaboration and model collaborative behaviours.
Required Experience & Qualifications
- Degree in Computer Science, Cloud Security, Information Security, and/or related discipline.
- 5 years or more of working experience in the Cloud, Platform & Network Security domain across various disciplines.
- Strong experience covering Cloud, Platform & Network Security services and required operating procedures.
- Strong service and customer focused approach to the service being delivered.
- Excellent interpersonal, collaborative and communication skills.
- Well-disciplined with exemplary professional competence and integrity.
- Hands-on experience with cloud and platform security technologies, including Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), container and Kubernetes security, cloud-native security services, identity and access management (IAM), vulnerability management
- Endpoint/server security (EDR/anti-malware), web application firewall (WAF), API security, DDoS protection, and network security technologies.
- Experience working with one or more major cloud platforms (e.g. AWS, Microsoft Azure, Tencent Cloud) and their native security capabilities.
- Understanding of cloud security principles and frameworks, including Zero Trust, cloud governance, secure cloud architecture, workload protection, and security monitoring.
- Industry-recognised certifications in cloud security or cyber security (e.g. CCSP, AZ-500, AWS Certified Security – Speciality, CISSP, CISM, or equivalent).
Workplace
- Collaborative working across Hong Kong and Shenzhen.
Salary
Benefits & Perks
- Competitive benefits package.
- Dynamic working environment.
- Development opportunities.
The Application Process
Accommodations are available for candidates with special needs during the interview process.