Manager, Cyber Security & Resilience

Our client is a leading organization operating mission-critical technology platforms with a strong focus on cybersecurity, operational resilience, and regulatory compliance. The company is investing in enhancing its cyber defense capabilities and strengthening its security posture to support long-term business growth and operational stability.

Responsibilities

• Lead the organization's cyber resilience and cybersecurity strategy, ensuring a strong and sustainable security posture.
• Establish and manage cyber threat intelligence capabilities, including threat collection, analysis, and reporting processes.
• Oversee security operations activities and manage relationships with SOC functions.
• Conduct cyber resilience assessments, risk evaluations, and security posture reviews, providing recommendations for continuous improvement.
• Define and enhance cybersecurity controls, resilience frameworks, and security governance standards aligned with industry best practices.
• Partner with stakeholders to develop cyber resilience roadmaps, security architectures, and risk mitigation initiatives.
• Coordinate audits, cyber assessments, and cyber attack simulation exercises with internal and external stakeholders.
• Provide cybersecurity expertise for technology projects and strategic initiatives.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline.
• Minimum 5 years of experience in cybersecurity, technology risk management, security governance, or cyber resilience.
• At least 3 years of management experience within cybersecurity functions.
• Strong knowledge of cybersecurity frameworks, technology risk management practices, and regulatory requirements.
• Experience managing security operations, cyber resilience programs, and threat intelligence initiatives.
• Familiarity with standards and frameworks such as ISO 27001, CSA STAR, HKMA C-RAF 2.0, etc.
• Professional certifications such as CISSP, CISM, CISA, CRISC, CEH, CCSP, CDPSE, or equivalent are highly desirable.
• Strong analytical, problem-solving, stakeholder management, and communication skills.
• Excellent report writing, presentation, and documentation capabilities.
• Fluent in English and Chinese.