Senior Manager, Cybersecurity

Job Purpose :

The Senior Manager, Cybersecurity is responsible for establishing, maintaining, and continuously improving the company's information security framework to protect critical systems, data, and digital assets. This role oversees both 1st Line of Defence (Operational Security) and 2nd Line of Defence (Tech Risk Oversight) functions, ensuring that cybersecurity risks are effectively managed, security operations are robust, and regulatory compliance is maintained.

The position requires strong leadership in security operations, governance, risk management, compliance, and vendor management while supporting the company’s digital transformation initiatives and ensuring compliance with HKIA GL20 requirements.

Main Responsibilities :

1. Cybersecurity Operations & Incident Response (1st Line of Defense)

• Lead the Security Operations Center (SOC) service provider, ensuring effective security monitoring, incident detection, and response.
• Oversee firewall rule changes, access controls, audit logging, and security event reporting.
• Collaborate with the SOC team to review system logs, alerts, and threat intelligence reports to detect and mitigate cyberattacks and insider threats.
• Conduct and oversee vulnerability scanning, penetration testing, and system hardening to strengthen cyber resilience.
• Manage security tools and technologies, including next-generation firewalls, WAF, IDS / IPS, email gateways, proxies, and DLP solutions.
• Perform day-to-day security risk control reviews, particularly for change requests affecting security policies (e.g., firewall rule modifications).
• Ensure effective incident response planning and execution, including coordination of annual cybersecurity drills with the SOC vendor.

2. Cybersecurity Governance, Risk & Compliance (2nd Line of Defense)

3. Security Oversight, Reporting & Management

Incumbent Requirements :

Qualifications & Certifications

Work Experience