Manager, Cyber Security Operation

Come Join Our Family Today!

Together, We Make Travel Better!

The primary responsibility of this role is to lead the security operation function of organization. This role ensures the protection of digital assets, IT infrastructure, and sensitive data against evolving cyber threats. The position manages the daily operation of Security Operation Center, delivery of Cyber Security Projects and implementations of all measures to enhance PPG’s cyber security perimeter.

What you’ll be doing:

• Manage and continuously strengthen the company’s overall cybersecurity posture.
• Lead and develop the IT cybersecurity team, fostering operational excellence and a security‑first culture.
• Implement all measures to execute the security policies, standards, and procedures for access control, data protection, and incident response.
• Coordinate with regulators and industry bodies on cybersecurity matters, ensuring compliance with relevant laws, regulations, and standards.
• Prepare and manage the cybersecurity budget in collaboration with relevant stakeholders.
• Oversee daily information security operations, including event monitoring, detection rule design, case follow‑up, and progress reporting.
• Oversee and coordinate the activities of external Managed Security Service Providers (MSSP) and their Security Operations Center (SOC) team, ensuring seamless collaboration, effective threat monitoring, and timely incident response and resolution, and communication with stakeholders.
• Conduct regular security assessments, audits, and vulnerability reviews to identify and mitigate risks.
• Establish processes for cyber threat intelligence collection, analysis, and dissemination.
• Proactively gather and leverage security intelligence to safeguard corporate assets, reputation, and public safety.
• Utilize AI, machine learning, and automation to enhance threat detection, monitoring, incident response, and infrastructure efficiency.
• Stay current with emerging cybersecurity technologies, particularly AI‑driven solutions, and industry best practices.
• Conduct cyber resilience assessments and contribute to enterprise risk metrics reporting.
• Develop and coordinate the company’s cyber resilience strategy, interpreting regulatory requirements and recommending industry best practices to the industry.
• Liaise with internal and external parties to perform resilience assessments and cyber-attack penetration testing
• Deliver security guidance, training, and security awareness programs for organization’s users and service providers.
• Lead and drive cybersecurity projects with internal and external stakeholders.

About you:

• University degree preferably in information technology, cyber security, computer science or related discipline.
• A minimum of 3 years’ experience in a managerial role within cybersecurity aspect, demonstrating proven leadership in overseeing security operations, risk mitigation, and compliance initiatives
• Good understanding cyber security best practices, with broad knowledge of data protection and/or industry practices
• Hands on experience on cloud infrastructure security on Amazon Web Services, Azure and Alibaba is a definite advantage.
• Familiar with PCI DSS, ISO/IEC 27001:2022 and SOC Type 2 framework and cyber security related guidelines.
• Cybersecurity professional certifications such as CISSP, CISM, CCSP or equivalent
• Team player with sound interpersonal and communication skills
• Excellent problem solving and analytical skills
• Good command of written and spoken English and Chinese
• Willingness to work after business hours and respond to emergencies when necessary.