Senior Manager (Cyber Resilience)

Major Responsibilities

• Manage the company’s cyber security posture
• Initiate and develop mitigation actions for any identified improvement areas or adverse trends
• Establish process for cyber threat intelligence collection, analysis and dissemination process
• Conduct cyber resilience related assessments for the company and provide input to risk metrics reporting
• Coordinate and develop cyber resilience strategy for the company, provide interpretation of cyber resilience controls and regulatory requirements, and recommend industry best practices and cyber resilience controls enhancement
• Coordinate with relevant parties for preparing cyber security budget
• Manage the Security Operations Center (SOC)
• Liaise with internal and external auditors in performing cyber resilience assessment and intelligence-led cyber attack simulation testing (iCAST)
• Define the cyber security and resilience requirements, work with relevant parties on architectural design for the projects and on-going enhancements
• Perform any other ad hoc duties or projects as assigned

Requirements

• University education preferably in information technology, cyber security, computer science or related discipline
• Minimum 8 years of experience in cyber security, technology risk management and auditing with at least 3 years’ experience at managerial level
• Good understanding of technology risk management and cyber security best practices, with broad knowledge of cyber risk and security issues, requirement, trends, and data privacy and industry practices
• Familiar with ISO27001, CAS STAR, HKMA SPM, CFI 2.0 framework, technology risk management and cyber security related guidelines.
• Certification of CISA, CISM, CDPSE, CRISC, CISSP, CISP, CEH, CCSP, CREST and/or other cybersecurity related certifications are is preferred
• Team player with sound interpersonal and communication skills as well as excellent problem solving and analytical skills
• Good command of written and spoken English and Chinese
• Good presentation, documentation and report writing skills