IT Security Manager (Infrastructure & Cybersecurity)

Key Responsibilities :

• Develop and implement security policies, standards, and procedures aligned with regulatory requirements
• Oversee day-to-day security operations across endpoint, network, system, and data security domains
• Manage vulnerability assessments, penetration testing, and remediation activities
• Operate security monitoring tools (e.g., SIEM) and lead incident response and recovery efforts
• Manage privileged access controls and monitor high-risk account activities
• Collaborate with IT and business teams to embed security best practices into operations and development
• Provide regular reporting on security posture, risks, and incidents to senior management
• Drive security awareness initiatives and mentor internal teams on cybersecurity practices

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related discipline
• Minimum 6 years of experience in information security, with 2-3 years in a leadership or managerial role
• Fluent in Chinese (Cantonese & Mandarin)
• Relevant certifications such as CISSP, CISM, CISP, OSCP preferred
• Strong hands-on experience in penetration testing and vulnerability management
• Familiarity with common security vulnerabilities (e.g., SQL injection, XSS, CSRF, privilege escalation)
• Proficiency with security tools (e.g., Nmap, Burp Suite, Nessus, Metasploit) and technologies such as SIEM, EDR, WAF, IDS/IPS, PAM
• Good understanding of network architecture, system hardening, and secure coding practices
• Ability to script or automate using languages such as Python or similar
• Strong analytical, communication, and stakeholder management skills with the ability to work across teams

What you need to do now

Interested candidates, please click "Apply Now" or send your CV via WhatsApp to 6228 4705 or email to [email protected]