Assistant Manager

_______________________________________
Job Requirements
•    Bachelor's degree or higher, with a strong interest in technology risk management, cybersecurity, and IT governance. Candidates with education experience and backgrounds in cybersecurity, information technology, engineering, statistics, or risk management are preferred.
•    Familiarity with international or regional compliance requirements and cybersecurity standards (e.g., ISO27001, NIST Cybersecurity Framework, HKMA requirements, SFC requirements, Hong Kong PDPO, EU GDPR, China's Cybersecurity Law, Data Security Law, Personal Information Protection Law, and cross-border data transfer regulations).
•    A minimum of 2 years of professional experience in cybersecurity or data compliance services, preferably within consulting firms or multinational enterprises. Hands-on experience in compliance assessments, technology risk management, or framework development is an advantage.
•    Possession of relevant cybersecurity certifications is a plus (e.g., CISA, CISM, CRISC, CISSP, PMP, CIPP-E, CIPP-CN, CIPM, GPEN, or other equivalent qualifications).
•    Ability to work independently and remotely with the level of discipline required to work with the wider project team based in Hong Kong.
•    Knowledge of network architecture, application security, vulnerability management, and security operations. Familiarity with common IT security tools is preferred.
•    Demonstrated ability to work independently and remotely with the self-discipline necessary to effectively collaborate with the broader project team based in Hong Kong.
•    Excellent written and verbal communication skills, with strong customer service orientation.
•    Strong teamwork and collaboration in a diverse work environment, along with a solid team-oriented mindset.
•    Proficiency in spoken and written English, with the ability to work in an English-speaking professional environment.

Responsibilities

Key Responsibilities
•    Assist in conducting assessments based on various cybersecurity standards and requirements, comprehensively evaluating risks and gaps in areas such as organizational cybersecurity frameworks, IT risk management processes, technology and operations, incident response, and business continuity planning.
•    Assist in performing cybersecurity maturity assessments and gap analyses to identify potential areas for improvement.
•    Evaluate the security architecture and design of applications, databases, operating systems, hardware platforms, and network infrastructure to identify potential vulnerabilities and risks.
•    Assist in the design and implementation of technology risk management systems and processes, such as identity authentication and access control, intrusion detection, threat intelligence, cybersecurity monitoring, and incident response.
•    Support the team in delivering data protection and privacy compliance projects based on applicable laws and regulations, providing professional services for organizations, such as the design of data leakage prevention solutions, process reviews, and privacy protection assessments.
•    Provide recommendations to address identified issues based on assessment results and communicate findings using professional terminology to management and clients. Facilitate the implementation of remediation plans.
•    Design and develop cybersecurity training and awareness programs to help improve organizational awareness of cybersecurity risks.
•    Continuously improve existing cybersecurity assessment methodologies.
_

Qualifications

Bachelor's degree or higher, with a strong interest in technology risk management, cybersecurity, and IT governance. Candidates with education experience and backgrounds in cybersecurity, information technology, engineering, statistics, or risk management are preferred.