Cyber Security Manager

Our client is a well-established HK institution, urgently seeking a Cyber Security Manager to lead the cybersecurity governance, risk management, and operational security across its IT landscape. This role will partner closely with IT leadership to strengthen security posture and ensure alignment with regulatory and industry standards.

Responsibilities of the Role:

• Develop and maintain enterprise-wide cybersecurity policies, standards, and frameworks aligned to regulatory requirements
• Provide strategic advisory to IT leadership on emerging cyber threats and security best practices
• Act as a key stakeholder within governance forums to ensure security is embedded across architecture decisions

• Lead regular risk assessments and vulnerability management initiatives to identify and mitigate threats
• Oversee incident response processes to ensure effective containment and resolution

• Implement and monitor security controls aligned with industry standards and audit requirements Drive cybersecurity awareness programs across the organisation
• Collaborate with business and technology teams to integrate security into day-to-day operations
• Report on cybersecurity risks and incidents to senior stakeholders

• Manage cybersecurity budgets, procurement processes, and vendor performance
• Evaluate investment decisions and identify cost optimisation opportunities

Required Skills for the Role:

• Degree in Information Security, Computer Science, or related discipline
• Minimum 8 years of experience in IT, with at least 3 years in cybersecurity roles
• Strong understanding of security frameworks (e.g., ISO 27001, CIS Controls)
• Hands-on experience with:
• Cloud platforms (AWS, Azure, Google Cloud, AliCloud)
• Security technologies such as SIEM, firewalls, and WAF
• Relevant certifications (e.g., CISSP, CISM, CISA) are advantageous
• Strong communication skills with the ability to engage both technical and non-technical stakeholders
• Excellent communication skills, both English and Cantonese