Manager (Cyber Resilience)

Major Responsibilities

• Manage the company’s cyber security posture
• Coordinate and develop cyber resilience strategy for the company, provide interpretation of cyber resilience controls and regulatory requirements, and recommend industry practices in implementation
• Establish and maintain a cyber threat intelligence program on cyber threat collection, analysis and dissemination processes
• Lead and conduct cyber resilience related assessments and projects for the company
• Initiate and develop mitigation actions for any identified improvement areas or adverse trends
• Provide cyber security advisory services on architectural design for IT projects
• Manage the Security Operations Center (SOC)
• Coordinate with relevant departments on cyber security related incidents and maintain the related procedures
• Provide input to the company’s risk metrics reporting
• Coordination with relevant parties for preparing cyber security budget
• Liaise with internal and external auditors in performing cyber resilience assessment and intelligence-led cyber attack simulation testing (iCAST)
• Liaise with regulators on cyber security matters
• Perform any other ad hoc duties or projects as assigned

Requirements

• University degree preferably in information technology, cyber security, computer science or related discipline
• Minimum 6 years of experience in cyber security, technology risk management and/or auditing
• Good understanding of technology risk management and cyber security best practices, with broad knowledge of cyber security products, Fintech, AI, data privacy and/or industry practices
• Familiar with ISO27001, CSA STAR, and HKMA CFI 2.0 framework, technology risk management, cyber threat intelligence and cyber security related guidelines.
• Experience on coordination of cyber security related incidents is an advantage
• CISA, CISM, CDPSE, CRISC, CISSP, CEH, CCSP, GPEN, CPENT, PNPT, OSCP, GCTI, AAIR, AAISM, AAIA, and/or other cyber resilience related certifications preferred
• Team player with strong interpersonal and communication skills
• Excellent problem solving and analytical skills
• Good command of written and spoken English and Chinese