Security Project Manager
Posted Updated
In this position, you will:
- Converged Security Strategy: Design and oversee a unified security posture that protects both the Enterprise IT network and the OT environment (SCADA, PLCs, and Building Automation).
- Client Relationship Management: Act as the lead Security Subject Matter Expert (SME) in client steering committees, translating complex technical risks into business-impact narratives.
- Security Lifecycle Management: Own the security roadmap from project inception through deployment, ensuring that security is "baked in" rather than "bolted on."
- Regulatory & Contractual Mastery: Fulfilling the international compliance standards (e.g ISO 27001, IEC 62443, NIST SP 800-82) and client-specific Security Service Level Agreements (SLAs), demonstrating mastery across Management, IT Security, and Industrial Control Systems (subset of OT).
- Network Segmentation: Implement and maintain robust network architectures using the Purdue Model to isolate critical industrial controls from the public internet.
- Vulnerability & Patch Management: Coordinate specialized patching cycles for IT assets and develop "compensating controls" for legacy OT hardware that cannot be easily updated.
- Unified Incident Response: Develop and test "Cyber-Physical" response playbooks to handle scenarios where a digital breach (e.g., Ransomware) affects physical safety or production uptime.
- Asset Integrity: Oversee the security of IoT/ industrial IoT sensors, edge computing devices, and traditional server infrastructure.
To be successful in this position, you should meet the following requirements:
- Possess at least a Bachelor’s or Master’s degree in Computer Science, Engineering, or Security Management
- At least ten years in security management with a focus on large-scale infrastructure or industrial customer projects
- Demonstrated expertise in Information technology (IT) security including but not limited to Zero Trust, Firewalls, Cloud etc.
- Demonstrated expertise in Operational Technology (OT), specifically within the Industrial Control Systems (ICS) subset, including industrial protocols such as Modbus and Profinet
- The ideal candidate will possess a "Converged Stack" of certifications, demonstrating mastery across Management, IT Security, and Industrial Control Systems (OT)
- Relevant certifications PMP CISSP CISM are a must ; others (GICSP, ISA/IEC 62443 Cybersecurity Specialist, GRID, CCSP, CISA) are highly desired, preferred and considered a plus
When you work:
- 5 days work
- 8 hours/day
What you enjoy:
- Discretionary Performance bonus
- Life insurance
- Medical insurance
- Education subsidies
- Birthday gift
- Marriage leave
- Birthday leave
- Staff discount
CMHK is committed to be an equal opportunity employer. We offer exceptional benefits package and the opportunity to work in a challenging environment. Personal data provided by applicants will be treated strictly in accordance with our personal data policy and for recruitment purposes only.