Your new company

Our client is a well-established enterprise organization with a sizeable technology environment across business-critical platforms, infrastructure, cloud services and digital applications. As part of its continued focus on strengthening cyber resilience, security governance and enterprise risk management, they are looking for an experienced Head / Senior Manager, Cybersecurity, to lead and oversee the organization's cybersecurity strategy, architecture, operations, risk and governance functions. Candidates from both large commercial enterprises and financial services organizations are welcome to apply.

Your new role

• Develop and drive the organization's cybersecurity strategy, roadmap and long-term cyber resilience initiatives.
• Lead the cybersecurity function covering security architecture, cyber operations, cyber risk management and governance.
• Establish and enhance cybersecurity policies, standards, frameworks and operating procedures across the enterprise.
• Oversee the design and implementation of security architecture controls across applications, data, AI, cloud, infrastructure and digital platforms.
• Provide leadership and governance for cybersecurity operations, incident response, threat management and security monitoring activities.
• Act as the escalation point for major cybersecurity incidents, coordinating investigation, remediation and post-incident reviews.
• Drive enterprise-wide cybersecurity risk assessments, control reviews and mitigation programmes.
• Partner with infrastructure, cloud, application development, data and digital teams to embed security-by-design principles into technology initiatives.
• Oversee third-party security assessments, vendor risk management and regulatory compliance programmes.
• Advise senior management and key stakeholders on cybersecurity risks, emerging threats, regulatory developments and strategic security priorities.

What you'll need to succeed

• Bachelor's degree in Information Technology, Computer Science, or related disciplines.
• 15-20 years of experience within Cybersecurity, Information Security, Technology Risk, IT Governance or related disciplines.
• Proven experience leading enterprise cybersecurity functions covering security architecture, security operations, incident response, risk management and governance within large-scale enterprise or group-level organizations.
• Strong experience developing cybersecurity strategies, roadmaps and security transformation programmes.
• Hands-on experience with frameworks such as ISO 27001, NIST CSF, ITIL or similar governance standards.
• Experience managing major cybersecurity incidents, crisis management and enterprise-wide remediation activities.
• Strong understanding of security policies, controls, regulatory requirements and industry best practices.
• Proven experience operating within complex enterprise environments, with candidates from both commercial organizations and financial services institutions welcomed.
• Strong stakeholder management skills with the ability to influence senior business and technology leaders.
• Professional certifications such as CISSP, CISM, CISA or equivalent would be advantageous.

What you need to do now

If you're interested in this exciting opportunity, please don't delay and click APPLY NOW. For more information, please contact Kelvin Chu at kelvin.chu@hays.com.hk.