Manager (Cyber Resilience)

About the role

Manager (Cyber Resilience)

Manager (Cyber Resilience) for a reputable financial services firm. The role involves developing cyber resilience strategies, managing security operations, leading risk assessments, providing security architecture guidance, and serving as the primary liaison for internal/external auditors and regulators.

Key responsibilities

• Develop cyber resilience strategies, interpret regulatory requirements (e.g., HKMA CFI 2.0, ISO27001), and align controls with industry best practices
• Establish threat intelligence programs, manage the Security Operations Center (SOC), and coordinate incident response procedures across departments
• Lead resilience assessments, drive mitigation plans, contribute to risk metrics reporting, and assist with cyber security budgeting
• Provide security guidance for IT project architectural designs, factoring in Fintech, AI, and data privacy
• Act as the primary liaison for internal/external auditors, manage intelligence-led cyber attack simulation testing (iCAST), and communicate directly with regulators

About you

• University degree in Information Technology, Cyber Security, Computer Science, or a related field
• Minimum 6 years of progressive experience in cyber security, technology risk management, and/or IT auditing
• Strong familiarity with ISO27001, CSA STAR, HKMA CFI 2.0, and modern data privacy/Fintech/AI practices
• Holders of CISSP, CISM, CISA, CRISC, OSCP, or GCTI is an advantage
• Excellent problem-solving, analytical, and interpersonal skills with a collaborative team-player mindset
• Fluency in both written and spoken English and Cantonese (verbal and written)