IT Security Manager - A26414

The Cybersecurity Manager leads and oversees the organisation's cybersecurity operations, governance, risk management and compliance functions. The role drives cybersecurity programmes, manages security operations and incidents, oversees cybersecurity reporting, asset management and third-party risk management, and supports the Agency Chief Information Security Officer (ACISO) in strengthening the agency's cybersecurity posture.

Responsibilities

Lead and manage cybersecurity operations, governance, risk management and compliance activities across the organisation; Oversee cybersecurity incident management, investigations, response, recovery and post-incident improvement activities; Manage cybersecurity programmes, including vulnerability management, cybersecurity asset management, third-party risk management, security monitoring and compliance activities; Monitor the organisation's cybersecurity posture and drive remediation of identified risks, vulnerabilities and security findings; Review and oversee cybersecurity assessments, security testing, risk assessments and assurance activities; Oversee cybersecurity metrics, scorecards, dashboards, management reports and compliance submissions; Provide cybersecurity advisory and oversight for projects, systems, cloud environments and technology initiatives; Collaborate with stakeholders, system owners, vendors, auditors and external agencies to address cybersecurity risks and requirements; Lead cybersecurity capability development, continuous improvement and operational resilience initiatives

Requirements

Degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline; At least five years of relevant experience in cybersecurity, information security, IT security, risk management, governance, compliance or security operations; Experience leading cybersecurity programmes, projects or operational security functions; Good understanding of cybersecurity principles, technologies, governance frameworks, risk management, incident response, cloud security and industry best practices; Strong leadership, stakeholder management, analytical, problem-solving and communication skills; Ability to manage multiple stakeholders and cybersecurity initiatives in a dynamic environment

Nice to have

Relevant professional certifications such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, or equivalent

Benefits

Market competitive salary and variable performance bonus; Outpatient medical, specialist medical coverage and customisable flexi benefits or flexi allowance; Life and health insurance; Special occasions red packet and CNY goodies; Year-round employee wellness initiatives; Learning programmes, certification support and dedicated staff development budget; Structured career pathways on technical/domain expert or leadership track; Competency framework; Flexible work arrangement (flexi-place, flexi-time, flexi-load)