Back to search

Regional Cybersecurity & IT Governance Manager - 800k

Hong Kong Permanent HK$660,000 - HK$860,000 per year View Job Description
As a Regional IT Manager - Cybersecurity, you will lead and manage the whole cybersecurity function within the Technology department for a retail company. You will help protect business systems and maintain safe technology practices that support day-to-day operations.
  • All-round Regional IT Security Manager
  • Hands-on with cybersecurity and IT governance

About Our Client

Our client is a well-known retail organization with operations across the Asia-Pacific region. As our client continues to accelerate their digital transformation, they are seeking an experienced Regional Cyber Security & IT Governance Manager to safeguard their digital assets, strengthen their risk posture, and ensure regulatory compliance across all regional offices.

Job Description

Reporting to the Head of IT, you will be responsible for formulating, implementing, and enforcing enterprise-wide cybersecurity frameworks and IT governance policies across the region. You will act as a trusted advisor to business leaders, balancing operational agility with robust risk management and regulatory adherence.As Regional Cybersecurity and IT Governance Manager, your main responsibilities will include:

  • Governance & Policy Management: Formulate, maintain, and enforce regional cybersecurity standards, IT governance frameworks, compliance policies, and operational guidelines aligned with international standards (e.g., ISO 27001, NIST, COBIT).
  • Risk Assessment & Mitigation: Lead structured cybersecurity and technology risk evaluations across diverse regional entities, cloud environments, and infrastructure platforms to identify vulnerabilities and deploy effective mitigating controls.
  • Regulatory & Audit Compliance: Ensure regional IT operations comply with local and international data privacy and cybersecurity regulations (such as Hong Kong's PDPO, SFC/HKMA guidelines where applicable, and regional APAC data laws). Manage internal and external IT audits and track remediation plans to closure.
  • Incident Response & Business Continuity: Oversee regional cyber incident response protocols, lead crisis simulation drills, and ensure disaster recovery plans are tested and maintained to minimize business disruption.
  • Third-Party & Vendor Risk: Establish and execute third-party security assessments, ensuring external vendors and cloud service providers meet strict security and SLA requirements.
  • Security Culture & Awareness: Drive regional cybersecurity training, phishing simulations, and awareness programs to cultivate a proactive security-first culture across all offices.
  • Reporting & Stakeholder Management: Evaluate emerging threat intelligence to recommend proactive security enhancements, and provide regular reporting on regional security posture and risk metrics to senior leadership.

The Successful Applicant

Requirements:

  • Education: Bachelor's degree in Computer Science, Information Security, Information Systems, or a related discipline.
  • Experience: Minimum of 6-8 years of experience in cybersecurity, IT governance, technology risk management, or IT audit, with at least 2-3 years in a regional or multi-entity leadership capacity.
  • Certifications: Recognized professional certifications such as CISSP, CISM, CISA, or CRISC are strongly preferred.
  • Technical & Regulatory Knowledge: Strong understanding of cloud security (AWS, Azure, or GCP), network architecture, identity and access management (IAM), and APAC data protection regulations.
  • Soft Skills: Exceptional stakeholder management, analytical, and communication skills, with the ability to translate complex technical risks into clear business terms for non-technical executives.
  • Language: Fluency in written and spoken English & Chinese is required; proficiency in Cantonese and Mandarin is mandatory

What's on Offer

  • Competitive regional compensation package and performance bonus.
Contact
Michelle J Ma
Quote job ref
JN-102026-7126767
Phone number
+852 2848 4736

Job summary

Function
IT
Specialisation
Security
What is your area of specialisation?
Retail
Location
Hong Kong
Job Type:
Permanent
Consultant name
Michelle J Ma
Consultant phone
+852 2848 4736
Job Reference
JN-102026-7126767

Diversity & Inclusion at Michael Page

We don't just accept difference - we celebrate it. We encourage applicants from all backgrounds to apply for this role and are committed to building inclusive, diverse workplaces where everyone can thrive. If you require any support or reasonable adjustments during the recruitment process, please let us know.