Senior Cyber Security & Compliance Specialist (IT Services)

About the role

Deloitte China is seeking a senior specialist to lead cyber security and compliance activities for its Hong Kong and Macau practices. The role combines hands‑on security operations with governance, audit coordination and client assurance responsibilities.

Key responsibilities

• Run daily security operations, including vulnerability management, privileged account management and phishing response, while maintaining audit‑ready logs.
• Own the Hong Kong information‑security and business‑continuity management systems (ISO 27001, ISO 22301), plan audits and drive remediation of findings.
• Respond to client due‑diligence questionnaires, third‑party risk assessments and regulator inquiries, and represent the firm in security reviews.
• Act as primary responder for security incidents, handling triage, containment, evidence preservation and post‑incident review.
• Conduct security risk assessments for new technologies and vendors, and deliver awareness programs and phishing simulations.

Required profile

• Bachelor’s degree in Computer Science, Information Security or related field.
• Minimum 5 years of experience in information security operations and governance within a regulated or professional‑services environment.
• Hands‑on experience with enterprise security tools such as vulnerability scanners, PAM, IAM and email security gateways.
• Experience operating or auditing an ISO 27001 ISMS; exposure to ISO 22301 is strongly preferred.
• Knowledge of Hong Kong regulatory landscape (PDPO, HKMA/SFC expectations) and cloud security controls (Microsoft 365, Azure).
• Relevant certifications (CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor/Implementer) and strong stakeholder‑management skills.

Required skills

• Vulnerability management platforms
• Privileged Access Management (PAM) solutions
• Identity and Access Management (IAM) systems
• Email security gateways
• Microsoft 365 and Azure cloud security controls
• ISO 27001 and ISO 22301 compliance frameworks