Infrastructure & Security Manager

Job Duties:

• Lead the design, deployment, and maintenance of enterprise infrastructure, including servers, mail gateways, networks, virtualization (VM), and cloud environments (AWS, Alicloud).
• Own the organization's cloud strategy and execution — architecting, deploying, and optimizing cloud environments across Hong Kong and overseas operations.
• Manage CI/CD pipelines, containerization, and orchestration (Kubernetes) to support reliable, scalable deployments.
• Plan and execute Disaster Recovery (DR) drills and maintain business contingency plans to ensure operational resilience.
• Implement and maintain enterprise security solutions; monitor, investigate, and respond to security incidents with timely reporting.
• Conduct risk assessments, vulnerability scans, and security testing; develop and enforce IT security policies, standards, and procedures.
• Lead internal and external audits to ensure compliance with ISO and other regulatory and business requirements.
• Provide expert guidance on secure, resilient system architecture and emerging infrastructure and security technologies.
• Drive infrastructure and cloud projects end-to-end with strong project management discipline — scope, schedule, budget, and stakeholder management.
• Deliver staff training and awareness programs to promote a strong security and operational culture.

Job Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related discipline.
• Minimum 8 years of experience in IT infrastructure and security operations, including proven hands-on experience delivering and deploying infrastructure and cloud environments, with time spent in a supervisory or team-lead capacity.
• Demonstrated track record of executing cloud deployments for Hong Kong and overseas/foreign operations.
• Strong knowledge of infrastructure technologies — servers, mail gateways, networking, virtualization (VM), CI/CD, and Kubernetes.
• Hands-on experience with cloud platforms (AWS, Azure), including deployment, configuration, and security settings.
• Solid understanding of DR drills, contingency/business continuity planning, ISO standards, and compliance.
• Working knowledge of cybersecurity frameworks, risk management practices, and incident response (SIEM, IDS/IPS, PAM, IAM).
• Strong project management skills, with the ability to lead projects and teams independently and collaboratively.
• Good command of written and spoken English, Mandarin, and Cantonese.
• Professional certifications such as PMP, ITIL, TOGAF, AWS/Azure certifications, CISSP, or CISM are preferred.
• Candidates with less experience may be considered for the position of Infrastructure and Security Engineer.