Total 19 Director/C-Level information security analyst job vacancies in Hong Kong

Responsibilities

• Produce cyber security strategies and work plan, policies, standards and guidelines
• Support digitalisation planning and aligning with ICT security strategy goals and policy baselines.
• Perform regular Gap analysis.
• Oversee ICT security matters (approving and tracking ICT security work plan and resourcing, monitoring performance in security indicators and risk acceptance decisions).
• Regular reviews of all ICT systems across different operating environments, the systems’ security design, implementation and operations.
• Conduct Cybersecurity risk assessment and acceptance processes at the management level.
• Review, consult and endorse risk management and mitigation plans from project teams.
• Advise on cyber security solutions and technologies to be deployed suitable to business operations and aligned with WOG-wide advisories and practices.
• Ensure compliance to the defined security policies, standards and guidelines.
• Create and execute end user security awareness programmes
• Establish defined processes for Threat and Incident Management.
• Ownership of security incident response workshops and exercises (table-top exercises, simulation and drills)
• Lead investigation and management of ICT security incidents.

Requirement

• Degree in Computer Science, Information Systems, Engineering or a related Technology based education.
• Minimum 5 years of information security management experience
• Skilled in evaluating the effectiveness of existing controls and recommending appropriate mitigation strategies for on-premises and cloud-related cybersecurity and data security issues.
• Able to identify on-premises and cloud-specific cybersecurity risks and threats as well as potential violations in on-premises or cloud environments
• Able to collaborate with multi-functional, multi-disciplined teams to formulate, institute real time awareness of security posture and baseline among end users.
• Demonstrate skills to thoroughly assess cybersecurity risks/threats impact
• Solid grasp of ICT operations, security policies, business processes and the relationship between them.
• Knowledge or experience in Infrastructure as Code (IaC) tools such as Terraform and Ansible, including their application in maintaining and automating secure on-premises and cloud environments.
• Strong understanding of insider threats, vendor risks, data leakage, malwares including ransomware, account hijacking, and compliance risks.
• Strong understanding of compliance requirements
• Good interpersonal and partner/ executive leadership skills.
• CISSP/ CISM/ CISA certifications are advantageous.

Ethos Search Associates Pte. Ltd.

EA Licence No: 13C6655

EA Reg No: R1988580 Jacky Chong

Manage the operations of the Security Department by ensuring product quality standards are meet and that optimum service is provided to all hotel guests according to the resort’s and business objectives. 

To be responsible in creating and controlling security and safety in hotel area and surrounding. Supervise all Security personnel and their activities. Plan and schedule works load and inspect in the operation, evaluates security activities regularly.

Liaise and work alongside team of Owning Company during the project, handover period and the maintenance of all resorts facilities and utilities to make sure smooth operation of the resort at all time.

Detail Job Description:

• Plans and organize all security and hotels activities. Determine personnel requirement and establish organizational structure for hotel Security
• Plans and schedules works load and establish performance and certain security and safety standards
• Plans and organizes procedures for expanded Resort safety and security
• Inspects and Evaluates Hotel Safety and Security activities to ensure compliance with Safety and Security policies and procedures
• Plans and Establish a functional on the job training program for hotel security personnel, evaluate the effectiveness of the training by observation of the work performance and written or oral examination
• Establish procedure and conducts special investigation and surveillance in area such as internal and external theft
• Performs a continuous process of intelligence gathering on any security and safety matters for collation, assessment and action if necessary
• Take necessary preventive measures for security coverage on hotel high risk (fire, bomb threat, earthquake, tsunami)
• Plans and supervise spot check, lockers check and physical check regularly
• Responsible for training and issuing license for Buggy in the resort
• Coordinate assistance and proper procedures with Authorities in case of accident that is considered fatal
• Maintain good relationship with local Authorities: Village Chief, Police, Army, Local Authorities
• To understand clearly and adheres with all applicable law and regulation either from Police, Military and Government
• Maintain motivation and discipline of the security staff
• To champion the Emergency Response Team, to prepare emergency procedures upon advice from relevant authority that cover such emergencies as Fire, Power Outrage, Bomb Threat, Cyclone Warnings, Tsunami, based on both Accor’s ALERT  and Government Regulations
• Attend regular meeting with other hotel security and update him/herself related on Security trend and threat
• To make sure all staff are aware of safety and security in the Resort by conducting regular training to all team member, including outsource personnel

Hotel safety and security

• Responsible for the hotel safety and fire standards, ensure regular check, and that safety standards and emergency procedures
• Ensure that all fire equipment in the Resort are in proper working condition (detection equipment's and fire-fighting equipment)
• Ensure regular fire drills are running in co-operation with the all departments. To ensure guest communication are in place to avoid complain
• On call 24/7 availability given the nature of the Position and Safety and Security importance towards colleagues, guests and asset

Legal Responsibilities

• Responsible for keeping up to date concerning all Indonesian legislations and required licenses with regard to the technical and safety aspects

Role: Head of Cyber Security / Security Engineering Lead

Company
A Singapore-based digital payments provider regulated by the Monetary Authority of Singapore (MAS) as a Major Payment Institution, offering Digital Payment Token services and cross-border payments.

Operates a P2B2C model, providing end-to-end infrastructure that enables businesses to enter and scale in the digital asset space with strong emphasis on security, compliance, and reliability.

Through its broader ecosystem and platform, it supports services such as OTC trading, fiat payments, digital asset custody, and prime brokerage.

Overview
Lead security engineering, operations, and technology risk functions. Responsible for defining and executing cyber defense strategy, ensuring compliance with regulatory standards, and driving certification initiatives (e.g. SOC 2, PCI DSS).

Key Responsibilities

Security Architecture & Engineering

• Define security architecture, IAM strategy, and data/application security controls
• Establish detection engineering standards across cloud and enterprise environments

Security Operations & Incident Response

• Oversee MDR, threat intelligence, vulnerability management, and red/purple team exercises
• Lead incident response and strengthen detection and recovery capabilities

Risk, Compliance & Governance

• Maintain security policies and frameworks
• Ensure compliance with regulatory and industry standards (MAS TRM, HKMA, PDPA, GDPR, ISO 27001, SOC 2, PCI DSS)
• Manage audits and third-party risk

Strategy & Leadership

• Develop and execute multi-year security roadmap
• Optimize tools, vendors, and resource allocation
• Present risk insights and performance metrics to senior leadership

Requirements

• 12+ years in information security, with 5+ years leading security engineering, operations, and GRC teams
• Experience in regulated financial services (banking, payments, fintech)
• Strong background in Tech Risk, Operational Resilience, and Data Privacy
• Hands-on experience with Zero Trust, DevSecOps, cloud security (AWS/OCI), SIEM/EDR/SOAR, IAM/PAM, DLP
• Proven incident leadership and crisis management experience
• Strong stakeholder management and ability to translate technical risk into business impact

Nice-to-Have

• CISSP, CISM, CCISO, or CCSP
• ISO 27001 Lead Implementer/Auditor
• SOC 2 program leadership
• PCI DSS experience (scoping, segmentation, audits)
• Data protection certifications (e.g. CIPP/E, CIPM)