Manager (Cyber Resilience)

Major Responsibilities:

- Monitor the company’s cyber security posture
- Initiate mitigation actions for any identified improvement areas or adverse trends
- Support the cyber threat intelligence collection, analysis and dissemination process
- Assist in conducting cyber resilience related assessments for the company and providing input to risk metrics reporting
- Assist in coordinating and developing cyber resilience strategy for the company, providing interpretation of cyber resilience controls and regulatory requirements, and suggesting industry best practices and providing advice on cyber resilience controls remediation
- Assist in maintaining and executing the company’s cyber resilience programme plan, tracking programme progress and preparing regular status reports
- Assist in the coordination with relevant parties for preparing programme budget
- Assist in managing the Security Operations Center (SOC)
- Liaise with internal and external auditors in performing cyber resilience assessment and intelligence-led cyber attack simulation testing
- Perform any other ad hoc duties or projects as assigned

Requirements:

- University education preferably in information technology, cyber security, computer science or related disciplines
- Minimum 5 years of experience in cyber security, technology risk management and auditing
- Good understanding of technology risk management and cyber security best practices, with broad knowledge of cyber risk and security issues, requirement, trends, and data privacy and industry practices
- Familiar with ISO27001 and HKMA CFI 2.0 framework, technology risk management and cyber security related guidelines. Certification of CISA, CISM, CDPSE, CISSP and/or CEH is preferred
- Team player with sound interpersonal and communication skills as well as excellent problem solving and analytical skills
- Good command of written and spoken English and Chinese