AVP - Cybersecurity (IT Security Group)

Join the Security & Architecture Group in Hong Kong as AVP - Cybersecurity (IT Security Group), helping to strengthen the bank’s cyber defence posture and ensure security controls meet regulatory and group standards. You will play a key role in security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small, specialist cybersecurity team.

Key Responsibilities

• Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are properly documented, tested and improved where necessary.
• Develop, maintain and update cybersecurity policies, standards and guidelines, aligning them with group requirements and local regulatory expectations (e.g. HKMA).
• Oversee the implementation and day-to-day operation of security technologies and controls, working with infrastructure and application teams to ensure effective protection.
• Plan, drive and track security hardening and vulnerability management activities, including remediation follow-up and reporting to management.
• Promote cybersecurity awareness and a strong security culture across the organisation through communication, training and engagement initiatives.
• Monitor cyber threat intelligence, market trends and emerging risks, and support incident management, response and reporting for cyber events.

Requirements

• Degree in IT, Cybersecurity or a related discipline.
• Minimum 8 years’ experience in the IT industry, including at least 5 years in cybersecurity and/or IT risk management.
• Hands-on experience supporting security assessments and implementing or operating security systems and controls.
• Banking experience and familiarity with HKMA cybersecurity and technology-risk guidelines are preferred.
• Professional qualifications such as CISA, CISM, CISSP or HKMA ECF-C-recognised certifications are an advantage.
• Able to work independently with strong communication, analytical and problem-solving skills.
• Fluent in English and Cantonese; Mandarin would be an added advantage.