Regional Cybersecurity & IT Governance Manager - 800k

Michael Page • Full Time • Central And Western District, Hong Kong, HK • 2d ago

As a Regional IT Manager - Cybersecurity, you will lead and manage the whole cybersecurity function within the Technology department for a retail company. You will help protect business systems and maintain safe technology practices that support day-to-day operations.

客户简介

Our client is a well-known retail organization with operations across the Asia-Pacific region. As our client continues to accelerate their digital transformation, they are seeking an experienced Regional Cyber Security & IT Governance Manager to safeguard their digital assets, strengthen their risk posture, and ensure regulatory compliance across all regional offices.

工作内容

Reporting to the Head of IT, you will be responsible for formulating, implementing, and enforcing enterprise-wide cybersecurity frameworks and IT governance policies across the region. You will act as a trusted advisor to business leaders, balancing operational agility with robust risk management and regulatory adherence.

As Regional Cybersecurity and IT Governance Manager, your main responsibilities will include:

Governance & Policy Management: Formulate, maintain, and enforce regional cybersecurity standards, IT governance frameworks, compliance policies, and operational guidelines aligned with international standards (e.g., ISO 27001, NIST, COBIT).
Risk Assessment & Mitigation: Lead structured cybersecurity and technology risk evaluations across diverse regional entities, cloud environments, and infrastructure platforms to identify vulnerabilities and deploy effective mitigating controls.
Regulatory & Audit Compliance: Ensure regional IT operations comply with local and international data privacy and cybersecurity regulations (such as Hong Kong's PDPO, SFC/HKMA guidelines where applicable, and regional APAC data laws). Manage internal and external IT audits and track remediation plans to closure.
Incident Response & Business Continuity: Oversee regional cyber incident response protocols, lead crisis simulation drills, and ensure disaster recovery plans are tested and maintained to minimize business disruption.
Third-Party & Vendor Risk: Establish and execute third-party security assessments, ensuring external vendors and cloud service providers meet strict security and SLA requirements.
Security Culture & Awareness: Drive regional cybersecurity training, phishing simulations, and awareness programs to cultivate a proactive security-first culture across all offices.
Reporting & Stakeholder Management: Evaluate emerging threat intelligence to recommend proactive security enhancements, and provide regular reporting on regional security posture and risk metrics to senior leadership.

理想的求职者

Requirements:

Education: Bachelor's degree in Computer Science, Information Security, Information Systems, or a related discipline.
Experience: Minimum of 6-8 years of experience in cybersecurity, IT governance, technology risk management, or IT audit, with at least 2-3 years in a regional or multi-entity leadership capacity.
Certifications: Recognized professional certifications such as CISSP, CISM, CISA, or CRISC are strongly preferred.
Technical & Regulatory Knowledge: Strong understanding of cloud security (AWS, Azure, or GCP), network architecture, identity and access management (IAM), and APAC data protection regulations.
Soft Skills: Exceptional stakeholder management, analytical, and communication skills, with the ability to translate complex technical risks into clear business terms for non-technical executives.
Language: Fluency in written and spoken English & Chinese is required; proficiency in Cantonese and Mandarin is mandatory

福利待遇

Competitive regional compensation package and performance bonus.

To apply online please click the 'Apply' button below. For a confidential discussion about this role please contact Michelle J Ma on +852 2848 4736.

Similar Jobs

Information and Technology Manager (Security Management) [Ref: ISD-AL]

Nanyang Commercial Bank • Full Time • Central And Western District, Hong Kong, HK • 1d ago

Information Technology IT Risk Management Full Time

Job Responsibilities: Assess the information security risks of new projects and propose mitigation measures; Design and implement cyber defense plan that is consistent with the Group and complies with the requirements of...

1d ago

Apply

IT Business Analyst (Payment Systems) - Information Technology Department

Chiyu Banking Corporation Limited • Full Time • Central And Western District, Hong Kong, HK • 2d ago

Information Technology SWIFT Payment Full Time

Responsibilities: Business & System Analysis: Understand and explain complex business processes, systems, and tools, with a specific focus on the business logic analysis of Hong Kong payment systems (e.g.FPS, CHATS,...

2d ago

Apply

Assistant Manager to Manager (AI Focus) – Information Technology Department

Chiyu Banking Corporation Limited • Full Time • Central And Western District, Hong Kong, HK • 2d ago

Information Technology Python Data Analyst Full Time

Provide data analysis to support business development Participate in establishing a bank-wide data asset platform Manage the record tracing on data process and application Responsibilities: Enhance data analysis and AI a...

2d ago

Apply

(Senior) Customer Analytics & Data Science Manager (AI & Modeling)

Bank of China (Hong Kong) Limited • Full Time • Central And Western District, Hong Kong, HK • 4d ago

Information Technology Full Time

Job No.: 500099 Employment Type: Full time Departments: Personal Banking and Wealth Management Department Job Functions: Business Development, Strategic Planning, Information Technology, FinTech Responsibilities: Explore...

4d ago

Apply

Business Analyst

Ambition • Full Time • Central and Western District, Hong Kong, HK • 5d ago

Information Technology Project Management Digital Innovation Full Time

Summary We are seeking an experienced Business Analyst to drive business improvement, digital transformation, and operational enhancement initiatives within the insurance industry. This role will work closely with busine...

5d ago

Apply

Vice President, Business Management (Corporate Banking)

Shanghai Commercial Bank Ltd • Full Time • Central And Western District, Hong Kong, HK • 6d ago

Information Technology Full Time

Responsibilities: Translate divisional strategy into operating plans, resourcing models, and growth initiatives Drive process re-engineering, system enhancements, user acceptance testing (UAT), automation, and change man...

6d ago

Apply

IT/ System Support Engineer(22-26k based on experience)

Tech Advance Consultancy Limited • Full Time • Central And Western District, Hong Kong, HK • HK$ 22,000 - HK$ 26,000 / month • 6d ago

Information Technology IT Full Time Customer Service

5 days work Attractive salary package and benefits Work in large-scale companies Responsibilities: Provide helpdesk and technical support for end-user via phone call or by email. Managing ticket system and provide resolu...

6d ago

Apply

AI SOLUTION ASSOCIATE / AI SOLUTION OFFICER

Henderson Land Development Company Limited 恒基兆業地產有限公司 • Full Time • Central And Western District, Hong Kong, HK • 6d ago

Information Technology Full Time

Responsibilities: Research, test and evaluate the latest AI tools across text, image, video, audio, 3D rendering and data analytics; assess their functionality, performance, cost and enterprise applicability Collaborate...

6d ago

Apply

Investment Project Manager - Hang Seng Bank (HK)

Hang Seng Bank • Full Time • Central And Western District, Hong Kong, HK • 6d ago

Information Technology Full Time

Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join Hang Seng and discover how valued you’ll be. Whether you want a career that could take you to the top,...

6d ago

Apply

CYBER SECURITY AND RISK ANALYST / CYBER SECURITY ENGINEER

Henderson Land Development Company Limited 恒基兆業地產有限公司 • Full Time • Central And Western District, Hong Kong, HK • 6d ago

Information Technology Full Time

Responsibilities: Co-ordinate with outsourced Security Operations Centre (SOC) to triage, investigate and respond to security alerts & incidents Manage vulnerability scanning, classify findings, enforce remediation S...

6d ago

Apply