Cyber Security Senior Manager/ Director - Insurance - HK

A top tier global insurance client is looking for a Senior Manager/ Director in the Cyber Security space. They are open to candidates from FS and non-FS background.

Key responsibilities:

• Coordinate the onboarding of domains and applications of the necessary protections
• Assist on the analysis on asset security especially on false positives
• Perform threat update review for web and mobile applications security provider
• Respond to application security incident noted
• Assist on the creation of various metrics, reporting, review of remediation progress and compliance status
• Assist on the strategic planning on how to properly protect the web and mobile applications
• Support the application operations to ensure the security posture of business units are under proper measure, monitor and manage
• Follow-up various tickets and remediation issues
• Maintain the domains, web and mobile applications inventory
• Drive and support the remediation of the overall web and mobile application security in line with the plan and closely coordinates with the internal team and third-party security vendors
• Follow-up of penetration test report and validate the remediation of the vulnerabilities found
• Basic review and analysis of the penetration test report
• Coordinate the implementation of the other projects when necessary

Hiring requirements:

• 12+ years' work expeirence with cyber security exposure across application and infrastructure; broad knowledge of cyber security concepts including web and mobile applications security, risk remediation
• Strong problem-solving skills and fast learner
• Liaison skill, teamwork, passion and commitment mentality
• Good interpersonal and communication skills
• Fluent in spoken and written English
• Greatly advantageous if candidates have experience either in implementing migration control measures to prevent cyber threat in vulnerable infrastructure/ application systems, or security operation team for cyber attack analysis (e.g. tactics and techniques, different threat intelligence feed information)