We are seeking an experienced and strategic cybersecurity leader to join a leading banking institution as Deputy Head, Information Security. This role will play a key part in shaping and executing the Bank's information security strategy, ensuring resilience against evolving cyber threats while supporting business innovation, digital transformation, and regulatory compliance.

The successful candidate will oversee multiple security functions across governance, security architecture, cyber risk management, threat and vulnerability management, security assurance, and security operations, while partnering closely with business, technology, risk, and compliance stakeholders.

Key Responsibilities

• Support the development and execution of the Bank's information security strategy, framework, policies, and operating model.
• Lead the implementation and continuous enhancement of enterprise-wide cybersecurity controls and capabilities.
• Oversee cyber risk management activities, including risk assessments, control reviews, remediation tracking, and reporting.
• Drive security governance and ensure alignment with regulatory requirements, industry standards, and internal policies.
• Provide strategic security advisory for digital initiatives, technology transformation programs, cloud adoption, and new product launches.
• Manage security architecture and design governance to ensure consistent implementation of security controls across the organization.
• Oversee threat intelligence, vulnerability management, and security monitoring capabilities to strengthen the Bank's cyber resilience.
• Collaborate with technology teams to identify, assess, and mitigate security risks across applications, infrastructure, data, and third-party environments.
• Lead security incident preparedness and support major cyber incident response and recovery activities when required.
• Monitor emerging cyber threats, technology trends, and regulatory developments, providing recommendations to senior management.
• Manage relationships with regulators, external auditors, industry bodies, and cybersecurity service providers.
• Support budgeting, resource planning, and vendor management for security-related initiatives and services.
• Build and develop a high-performing security team through coaching, mentoring, and talent development.

Requirements

• Degree holder in Information Security, Computer Science, Information Technology, Engineering, or related disciplines.
• Minimum 12 years of experience in information security, technology risk, cybersecurity, or related disciplines within banking or financial services.
• Proven leadership experience managing cybersecurity, risk, governance, or security engineering teams.
• Solid understanding of banking regulatory requirements and cybersecurity frameworks relevant to financial institutions.
• Strong knowledge of cyber risk management, security architecture, security operations, threat management, incident response, and security governance.
• Experience leading large-scale security transformation, regulatory initiatives, or enterprise security programmes.
• Familiarity with cloud security, data protection, third-party risk management, and digital banking technologies.
• Strong stakeholder management, communication, and influencing skills, with the ability to engage senior executives and business leaders.
• Professional certifications such as CISSP, CISM, CISA, CRISC, or equivalent are preferred.
• Excellent command of English and Chinese.

What you need to do now

Interested candidates, please click "Apply Now" or send your CV via WhatsApp to 6228 4705 or email to Christine.lau@hays.com.hk