AVP – Cybersecurity (IT Security Group)

Overview Join the Security & Architecture Group in Hong Kong as AVP – Cybersecurity (IT Security Group), helping to strengthen the bank’s cyber defence posture and ensure security controls meet regulatory and group standards. You will play a key role in security assessments, policy and standards design, security system implementation, hardening, vulnerability management and incident response within a small, specialist cybersecurity team. Key Responsibilities - Coordinate security assessments initiated by regulators, APAC offices and Head Office, ensuring security controls are properly documented, tested and improved where necessary. - Develop, maintain and update cybersecurity policies, standards and guidelines, aligning them with group requirements and local regulatory expectations (e.g. HKMA). - Oversee the implementation and day‑to‑day operation of security technologies and controls, working with infrastructure and application teams to ensure effective protection. - Plan, drive and track security hardening and vulnerability management activities, including remediation follow‑up and reporting to management. - Promote cybersecurity awareness and a strong security culture across the organisation through communication, training and engagement initiatives. - Monitor cyber threat intelligence, market trends and emerging risks, and support incident management, response and reporting for cyber events. Requirements - Degree in IT, Cybersecurity or a related discipline. - Minimum 8 years’ experience in the IT industry, including at least 5 years in cybersecurity and/or IT risk management. - Hands‑on experience supporting security assessments and implementing or operating security systems and controls. - Banking experience and familiarity with HKMA cybersecurity and technology‑risk guidelines are preferred. - Professional qualifications such as CISA, CISM, CISSP or HKMA ECF‑C‑recognised certifications are an advantage. - Able to work independently with strong communication, analytical and problem‑solving skills. - Fluent in English and Cantonese; Mandarin would be an added advantage. If you are an experienced cybersecurity professional looking to take on an AVP‑level role in a focused IT Security Group, please send your CV to Raymond Cheung for a confidential discussion about this opportunity.