IT Security Manager (Cyber Incident & Infrastructure)

Kowloon City, Hong Kong
Temporary
Full-time

1 month ago
Apply easily

Large Organisation Exposure
Cutting-edge cybersecurity technologies within the insurance industry.

About Our ClientOur client is a leading life insurance and financial services provider headquartered in Hong Kong. It has grown to become the largest publicly listed life insurance group in the Asia-Pacific region. The company operates in 18 markets across Asia, offering a wide range of products including life, health, and accident insurance, as well as retirement planning and wealth management solutions.They are seeking a proactive and experienced Security Manager to lead incident response coordination and infrastructure security operations. This role serves as the key liaison between internal teams and the Group Cybersecurity function, ensuring effective communication, timely incident handling, and robust infrastructure protection. The ideal candidate will also oversee firewall and web application firewall (WAF) configurations, ensuring alignment with security standards and policies.Job Description

Act as the central point of contact for cybersecurity incidents, facilitating communication between internal teams and the Group Cybersecurity unit.
Track, document, and follow up on security incidents to ensure timely resolution and compliance with response protocols.
Escalate high-priority threats and provide detailed incident summaries and reports.
Review and assess firewall rule change requests to ensure they meet security and compliance requirements.
Collaborate with IT teams to streamline firewall configurations and eliminate redundant access.
Promote cybersecurity awareness across business and IT teams.
Contribute to the development of governance frameworks and resilience strategies in line with corporate standards.

The Successful Applicant

Bachelor's degree in Cybersecurity, Information Technology, or a related discipline (or equivalent practical experience).
At least 5 years of experience in cybersecurity operations, incident management, or infrastructure security.
Strong knowledge of firewall administration and security best practices.
Hands-on experience with WAF technologies and web application security.
Familiarity with network security concepts such as IDS/IPS, VPNs, zero trust architecture, and cloud security.
Understanding of security frameworks like NIST, CIS, ISO 27001.
Professional certifications such as CISSP, CISA, CISM, CEH, or GIAC are a plus.

What's on Offer

Renewable contract with potential for future opportunities.
Exposure to cutting-edge cybersecurity technologies within the insurance industry.
A professional and collaborative work environment in Hong Kong.

Michael Page