Cyber Security Manager

Responsibilities

• Oversee and enhance IT risk management processes, facilitating risk assessments and monitoring mitigation strategies.
• Engage in security monitoring, detection, and analysis of security incidents to ensure effective cyber defense measures.
• Conduct technology risk assessments on various digital assets, including SSO identities, servers, workstations, operating systems, web applications, and firewalls.
• Administer privileged access management platforms, vulnerability management tools, and threat detection solutions.
• Manage cyber security incident response operations, documenting incidents and assessing their validity and priority.
• Carry out forensic investigations on networks, servers, and endpoints, addressing spam and malicious emails reported by users.
• Perform control and vulnerability assessments, assisting in compliance monitoring to identify weaknesses and suggest corrective actions.
• Develop and validate baseline security configurations for information systems.
• Review and evaluate exception-based security authorization requests and assess new threats with recommended solutions.
• Lead and execute security-related projects while fostering cyber security awareness and evaluating disaster recovery plans.
• Collaborate with internal or external parties for independent penetration tests and vulnerability assessments.
• Implement IT compliance procedures to ensure proactive adherence.

Required Skills

• A degree in Information Technology, Computer Science, or a related field.
• At least 5 years of substantial IT experience in a large organization, with a minimum of 3 years focused on IT security and technology risk operations.
• Strong background in IT security technologies, including Anti-phishing Simulation, Vulnerability Scanners, SIEM, DLP, Antivirus, and Firewalls.
• Practical experience with at least two of the following security tools: Qualys VM/VAS, BeyondTrust PAM, Microsoft Defender, Microsoft Purview, Microsoft Sentinel, Burp Suite.
• Comprehensive knowledge of security frameworks (e.g., MITRE) and common internet application vulnerabilities.- Experience in project and vendor management.
• Additional certifications such as CISM or CEH are advantageous.

Preferred Education and Experience:

• A valid CISSP certification is required.
• Proficiency in both written and spoken English and Chinese (Mandarin).
• Willingness to travel and work after hours or on weekends as needed.
• A collaborative team player who is eager to share knowledge.

If this job isn't quite right for you, but you know someone who would be great at this role, why not take advantage of our referral scheme? We offer HKD1000 in Apple gift cards for every referred candidate who we place in a role. Terms & Conditions Apply. https://www.ambition.com.hk/refer-a-friend