New Job Opening: Lead - Cyber Security Architect in Hong Kong

Job Description

About our client

A well-established organisation with a significant operational technology and industrial systems footprint, investing in the maturity of its enterprise security capability. This is a senior, hands-on security architecture role within the central security function, focused on both corporate IT and industrial operational technology environments.

Responsibilities

• Act as the recognised authority on securing operational technology, running architecture reviews of proposed operational technology solutions against relevant standards, regulatory expectations and internal security requirements.


• Provide hands-on technical direction across IT and operational technology security, spanning system hardening and secure design for both hardware- and software-oriented initiatives.


• Own the definition of security baseline requirements, revisiting and updating them as new platforms and infrastructure come into scope.


• Guide implementation of secure architectures end to end, including the hardening and configuration of security controls.


• Contribute to shaping and maintaining internal security policies, standards and guidance.


• Embed architectural assurance into the business case review cycle, checking designs for a sound posture across both network and infrastructure layers.


• Run technology evaluations with mixed internal and external teams to select fit-for-purpose security tooling.


• Steer and track delivery of security initiatives across the function.


• Support the security operations team with specialist input during IT and operational technology incidents.


• Mentor and upskill fellow architects and wider security colleagues across IT and operational technology security topics.


• Manage vendors across project delivery and ongoing technical support.

Requirements

• Degree-level education or equivalent.


• Substantial background in operational technology and its cyber security, underpinned by strong experience in security infrastructure design and delivery.


• Proven track record designing security architectures across IT, operational technology and converged IT/operational technology environments.


• CISSP certification.


• A recognised security architecture credential (such as SABSA or comparable).


• An industrial/operational-technology-focused security certification (for example GICSP or similar).


• Hands-on experience assessing security weaknesses and building mitigation approaches for networked systems.


• Working knowledge of established security frameworks (e.g. NIST, ISO).


• Experience supporting and driving cyber risk management activities.


• Capability in eliciting and engineering security architecture requirements.


• Strong vendor management experience with an emphasis on outcome-based arrangements.


• Confident leader and influencer across internal and external stakeholders.


• Able to translate complex security concepts for non-technical audiences.


• Self-directed and dependable, comfortable working under pressure with limited oversight.


• Strong written and spoken command of English and Chinese.