about the company.
The hiring company is seeking a highly innovative and forward-thinking IT Security Strategist to lead new cybersecurity initiatives for company growth. The ideal candidate will be instrumental in anticipating and addressing emerging threats and challenges, ensuring our defenses are always a step ahead and drive the development and implementation of cutting-edge security strategies, policies, and architectures to protect the vital assets.
...
about the job.
- Pioneer Cybersecurity Engagements: Lead and deliver cybersecurity engagements, including defining security strategy, policy, and architecture, enhancing information privacy and governance, ensuring certification and compliance, bolstering business and technology resilience, and conducting thorough security testing.
- Translate Technical to Business: Effectively communicate complex technical security issues in clear business terms, consistently delivering value through pragmatic application of information security principles.
- Proactive Risk Mitigation: Conduct technology risk assessments with a focus on cyber risks, identifying and implementing innovative mitigations that address the evolving threat landscape.
- Next-Generation Vulnerability Assessment: Assess the IT security architecture across all platforms—applications, databases, operating systems, hardware (including web and mobile), and network infrastructure—for vulnerabilities to cyber-attacks. Develop comprehensive, forward-looking strategies to proactively mitigate these risks.
- Optimize Security Ecosystem: Continuously assess the effectiveness and coverage of cybersecurity tools across the company. Identify the potential of new security technologies and provide insights on automating, consolidating, and enhancing the operational efficiencies of existing security tools to stay agile.
- Strategic Reporting & Communication: Identify and communicate engagement findings to senior management and client personnel, ensuring transparent and impactful reporting. Develop and share daily, weekly, and monthly reports with management.
- Cultivate Security Awareness: Develop innovative marketing and training materials to foster a strong security-aware culture among staff within the company
- Agile Management: Demonstrate the ability to manage multiple priorities and reprioritize effectively in response to operational and evolving security needs.
- Strategic Vendor Partnerships: Leverage expert vendor management skills, particularly with security vendors, to collaborate on roadmap development and assess their relevance and contribution to long-term security posture.
skills & experiences required.
- University graduate in Information Technology.
- A minimum of 10 years of experience within the IT Security field, with at least 3 years in a Security Architect or Strategist role.
- Demonstrated experience with common information security management frameworks, such as ISO 27001, CobiT, ITIL, and PCI.
- In-depth knowledge of key laws and regulations including PDPO, PCPD, GDPR, Critical Infrastructure Services (HK CIO), and similar frameworks.
- Exceptional ability to present and communicate effectively with senior stakeholders, articulating complex security concepts and strategic initiatives.
- Proven ability to prepare and communicate robust Business Cases for initiatives under Cybersecurity roadmaps.
- Professional qualification holder preferred (e.g., GPEN, OSCP, CISSP, CRISC, CISA, CISM, or other relevant certifications).
- Strong in influencing, persuasing multi-stakeholderrs with a demonstrated ability to gain the confidence and respect of senior-level executives.
- Superior analytical skills and the ability to develop thought leadership in the cybersecurity domain.
- Relevant experience with enterprise cybersecurity technologies and controls.
- Experience managing security operations and/or assurances is an added advantage.
- Knowledge of IT security vendor products is an advantage.
- Profound understanding of Cyber risk management principles.
If you’re interested in this exciting opportunity please don’t delay and click APPLY NOW; or for more information, you can reach out to Wendy Fung at wendy.fung@randstad.com.hk with your resume.