Deputy Director, Infrastructure - Technology & Innovation

At Kerry Properties, we commit to employing people who are passionate and dedicated. We look for people who always strive for excellence and possess a positive attitude. In turn, we offer our people boundless opportunities in career advancement and realization of their potential.

Job Highlights:

You will play a pivotal role in managing and strengthening the organization's cybersecurity capabilities across various projects and asset types mainly in Hong Kong and Mainland. Your responsibilities encompass overseeing day-to-day cybersecurity operations, leading the project management and execution of planned cybersecurity initiatives and programs, and collaborating closely with the Technology & Innovation Leadership team to develop and implement strategic roadmaps aimed at enhancing the company’s defence against emerging internal and external threats.

Responsibilities:

• Oversee and coordinate the daily operations of the cybersecurity team (including outsourcing partner), ensuring robust protection of corporate assets and information systems.
• Plan, manage, and execute cybersecurity projects and programs, ensuring alignment with organizational goals and timely delivery of key initiatives.
• Assist the leadership in designing, developing, and continually refining the corporate cybersecurity roadmap and strategy.
• Monitor the evolving threat landscape to proactively address internal and external security risks.
• Lead incident response efforts, coordinating containment, investigation, and remediation activities as required.
• Drive the implementation of the best & applicable practices in cybersecurity governance, policies, standards, and procedures.
• Collaborate with cross-functional teams to raise security awareness, enforce & validate compliance, and foster a culture of security throughout the organization.
• Provide regular updates and reports to senior leadership regarding the security posture, project progress, and key risk indicators.
• Evaluate and recommend new technologies or tools to strengthen the organization’s cybersecurity infrastructure.

Requirements:

• At least 12 years of experience in cybersecurity operations management, project management, supporting information security services and solutions
• Strong knowledge with hands-on experiences on standard security management frameworks, identity and privileged access management (IAM, PIM & PAM), vulnerability management solutions, SOC operations, DLP, application/code security, Firewall, WAF, SIEM, DNSSec, Cloud security, endpoint security solutions and application security of enterprise systems.
• Hands-on experiences on managing and implementing Enterprise PAM, Microsoft security ecosystem, DevSecOps, Red/blue teaming, security architecture and baselines on hybrid Cloud environments, phishing attack simulation, security awareness and penetration tests.
• Knowledges in Service Management framework, Security/privacy and compliance standards and framework (e.g., ITIL, COBIT, NIST, ISO 27001) will be an advantage
• Holder of valid CISSP certification is a must with one or more on CCSP, OSCP, CEH qualifications
• Holder of ITIL v4 certification is preferred
• Good command of both written and spoken English and Chinese (Cantonese and Mandarin)

(The personal data provided will only be used for recruitment and employment-related purposes. All personal data provided will be treated in strict confidence. All applications may be considered for other suitable position(s) in the Kuok/Kerry Group and its subsidiary/ associated companies. For correction of or access to personal data after submission of the application or enquiries on recruitment matters, please contact Human Resources Department by email to hr.talentacquisition@kerryprops.com. Please mark “Confidential: Personal Data Access/ Correction/ Recruitment Enquiries” on your correspondence. Information on unsuccessful candidates will normally be destroyed after 24 months from the date of application. By submitting an application through Kerry Properties' Career webpage, you are deemed to have consented to its Personal Information Collection Statement.)