Senior Manager, Information Technology (IT Security & Operations)

Key Responsibilities

• Lead IT security governance, assurance and IT service operations. Establish security policies, cybersecurity frameworks, standards, controls and reporting aligned with hospital risks, best practices and relevant regulatory requirements

• Act as the internal security control and assurance function for infrastructure and application portfolios. Review security health, configuration, access, vulnerabilities, patches, logs and remediation. Defines security requirements, monitors compliance, challenges exceptions, validates remediation and escalates unresolved risks

• Supervise and develop the IT operations team. Provide integrated 24 x 7 monitoring and service operations for infrastructure and applications. Lead incident triage, escalation, containment coordination, service restoration coordination, root-cause review and follow-up actions with the responsible IT teams and service providers

• Coordinate risk assessments, vulnerability assessments, penetration tests, audits, drills, training and compliance submissions. Report security posture, service performance, risks and actions to relevant governance committees

• Undertake other duties and ad hoc projects as assigned by supervisor

Job Requirements

• Holder of a Bachelor’s Degree in Computer Science, Cybersecurity, Information Systems, Engineering or a related discipline

• Recognised information-security qualification such as CISSP, CISM, CISA or CISP is required. ITIL, ISO/IEC 27001, cloud security or business continuity certification is preferred

• At least 12 years of relevant IT experience, including 5 years in a leadership role covering cyber security, infrastructure or IT operations

• Experience in mission-critical, high-availability or regulated environments; healthcare experience is an advantage

• Solid experience in IT security and operations, including incident management, business continuity, vulnerability management and security assurance

• Experience in leading IT operations teams and managing service providers/vendors

• Sound knowledge of cybersecurity governance, controls and operational resilience, with good understanding of relevant regulatory and privacy requirements

• Familiarity with recognised cybersecurity, information security and IT service management frameworks and practices

• Strong leadership, stakeholder management, communication, analytical and problem-solving skills

• Good command of both written and spoken English and Chinese

Compensation and Employment Terms

We provide a unique employment experience for people seeking careers in hospital and healthcare industry; and offer competitive remuneration packages to the successful candidates. Appointment will be made on a 3-year contract with contract-end gratuity, renewable subject to good performance and mutual agreement.

Application Closing Date

8 November 2026

Personal Information Collection Statement

Data collected will only be used for job application processing. Applicants not contacted by CUHK Medical Centre Limited within eight weeks from the application closing date may assume their applications unsuccessful. All personal data collected will be kept for a period of 12 months from the application closing date, and will be destroyed thereafter.