Assistant Manager – Cybersecurity

About the role

The bank is seeking an Assistant Manager to lead its cybersecurity initiatives. You will act as a subject‑matter expert on security tools, drive assessments, and support incident response across the organization.

Key responsibilities

• Operate, administer and provide expertise on security solutions such as firewalls, IDS/IPS, WAF, DDoS protection, VPN, endpoint protection, anti‑phishing, DLP, APT detection and SIEM.
• Conduct cyber security and vulnerability assessments and manage implementation of security controls.
• Review, maintain and enforce cyber security policies, standards and procedures in line with IS and risk management frameworks.
• Develop and deliver a targeted cyber security awareness training program for all employees.
• Design and test recovery plans to ensure resilience and rapid restoration of IT services after security incidents.
• Support incident management processes and coordinate response activities.

Required profile

• Minimum 8 years of experience in IT security, preferably within banking.
• Strong knowledge of HKMA standards and regulations.
• Professional certifications such as CEH, CCSA, CISSP, CISM, CISA or ITIL are preferred.
• Fluent in Cantonese and English, independent and able to work under pressure.

Required skills

• Firewall, IDS/IPS, Web Application Firewall (WAF), DDoS mitigation, VPN.
• Endpoint protection, anti‑phishing solutions, Data Loss Prevention (DLP), Advanced Persistent Threat (APT) detection.
• Security Information and Event Management (SIEM) platforms.
• Cyber security assessment and vulnerability assessment tools.

What we offer

• High‑performing, energetic team with strong career progression.
• Attractive remuneration package including a basic salary of HK$53‑55K plus bonus.