About the Company
Our client is a prominent regional enterprise with significant operations across Hong Kong and Mainland China. Known for its commitment to innovation and digital transformation, the organization is currently scaling its technology infrastructure and security posture. To support this growth, they are seeking a high-caliber Cybersecurity Director to oversee regional security operations and drive modern defense initiatives.
About the Team
...
You will join an elite, fast-paced IT team composed of dedicated technical experts. Working closely with executive leadership, the team fosters a collaborative culture focused on continuous learning, adoption of cutting-edge tools, and proactive risk mitigation.
About the Job
- Lead and manage day-to-day cybersecurity operations, supervising internal technical teams and managed security service providers (MSSPs).
- Plan and deliver end-to-end security projects, ensuring alignment with corporate technology roadmaps and timely completion.
- Partner with the CISO and leadership team to design, evaluate, and refine regional security strategies and governance frameworks.
- Oversee threat intelligence monitoring, incident response, containment, and post-incident remediation efforts.
- Implement robust policies, security baselines, and frameworks (e.g., ISO 27001, NIST, COBIT) across hybrid cloud and enterprise architectures.
- Drive organization-wide security awareness programs, compliance validation, and simulated phishing assessments.
- Evaluate, test, and integrate advanced security tools to continuously strengthen multi-region infrastructure.
Skills & Experience Required
- Minimum 12 years of experience in cybersecurity operations, project management, and enterprise security architecture management.
- Active CISSP certification is mandatory; additional qualifications such as CCSP, OSCP, or CEH are highly desirable.
- Solid experience with ITIL v4 frameworks and service management best practices.
- Expertise in PAM/PIM/IAM, SOC operations, SIEM, vulnerability management, cloud security (hybrid environments), DevSecOps, DLP, and WAF/Firewall operations.
- Practical background in Microsoft security solutions, penetration testing coordination, and red/blue team exercises.
- Strong written and spoken proficiency in English and Chinese (Cantonese and Mandarin) is required due to cross-border stakeholder management.
- Excellent analytical, leadership, and communication skills to present risk insights to senior executives.
Interested in exploring this opportunity? Click 'Apply Now' or reach out directly to Anson Chau with your updated resume:
- Email: anson.chau@randstad.com.hk
- Phone / WhatsApp: +852 6168 9169
