Cybersecurity Manager

Tai Sang Bank is seeking a hands-on Cybersecurity Manager to lead its cybersecurity programme and strengthen security across its infrastructure, core banking systems, and customer-facing applications.

As the Bank’s primary cybersecurity lead, you will combine strategic planning and governance with practical implementation, investigation, and remediation. Working closely with technology and business teams, you will lead risk assessments, enhance security monitoring and incident response, and embed security-by-design into the Bank’s operations and digital initiatives.

Responsibilities

• Own and drive the Bank’s cybersecurity strategy and multi-year roadmap.
• Establish and maintain cybersecurity governance frameworks and related policies.
• Lead enterprise-wide cyber risk assessments and maintain the risk register.
• Identify control gaps and drive remediation with business and technology teams.
• Oversee third-party and vendor cybersecurity risk assessments and monitoring.
• Define and assess security requirements for web, mobile, APIs, and banking integrations.
• Oversee security monitoring, vulnerability management, and security testing activities.
• Ensure compliance with regulatory requirements, including C-RAF, and support related examinations, audits, and reviews.
• Lead major cybersecurity incident response, including coordination, investigation, reporting, and post-incident remediation.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related discipline.
• Minimum 8 years’ experience in cybersecurity or technology risk, preferably in banking.
• Hands-on experience with enterprise security technologies (SIEM, EDR, IAM, DLP).
• Proven experience handling and coordinating cybersecurity incident response.
• Solid understanding of cloud security principles and best practices.
• Experience supporting regulatory reviews and external audits.
• Knowledge of banking technology risk assessments and cybersecurity regulations.
• Solid understanding of infrastructure, network, and application security controls.
• Professional certification such as CISSP, CISM, CISA, or CRISC preferred.
• Strong analytical, communication, and stakeholder management skills.
• Fluent in English and Cantonese.

Personal data provided by job applicants will be used for recruitment purpose only and will be treated in accordance with the Bank's Personal Information Collection (Employee) Statement. Applicants who are not invited to interviews within 8 weeks may consider their applications unsuccessful and the personal data collected will be destroyed after 2 years.