The hiring company is a leading enterprise and looking for seasoned talents either from first line or second line to join their first line of defence to safeguard information assets, cloud platforms, and critical infrastructure, ensuring operational resilience and regulatory compliance across operations.

Key Responsibilities:

• Implement cyber risk methodologies, define risk appetite, and develop executive-level KPI/KRI dashboards.
• Monitor emerging threats across cloud, Generative AI, and third-party vendor ecosystems.
• Deliver strategic risk intelligence, posture reports, and compliance audit frameworks for board-level reporting.
• Govern identity and access management (IAM/MFA) standards across diverse business platforms.
• Drive organizational cybersecurity awareness and cross-functional data protection initiatives.

Requirements:

• Degree in Computer Science, IT, Cybersecurity, or a related discipline; certifications (CISSP, CISA, GSEC) preferred.
• Minimum 10 years' technical IT experience, specializing in cyber risk metrics and GRC operations.
• Proven track record in stakeholder management across onshore, offshore, and third-party vendor teams.
• familiarity with enterprise IAM systems and cloud identity providers (e.g., Azure, Okta) would be a plus
• Strong business writing, with good understanding of dashboard developments
• Fluency in English, Mandarin, and Cantonese (written and spoken).

Application

Our specialist consultant Wendy will get in touch with you soon, if we find your profile suitable for this position or any other vacancies we are recruiting for.