Deputy Executive Manager, Security Operations Centre

The Cyber Security Operations Centre (CSOC) Manager leads the Club's CSOC within the Cyber Security Department, which safeguards information assets, IT systems, networks and cloud platforms while ensuring the resilience and continuity of critical operations. The role manages both the internal CSOC team and external managed security service providers, and acts as the lead for the Cyber Incident Management Team during material cyber security incidents. The department operates as the first line of defence, identifying and addressing vulnerabilities, protecting sensitive information, ensuring rapid incident response, overseeing access management and promoting Club-wide cybersecurity awareness.

• Manage the CSOC team, including hiring, training, coaching, objective setting and performance evaluations.
• Manage the external MSSPs, ensuring appropriate service level performance is established, monitored and met.
• Provide oversight on the handling of cyber security incidents, ensuring adequate and appropriate resources are available to deliver timely and effective resolution.
• Continuously identify control gaps and improvement initiatives to uplift CSOC and cyber security incident response processes, detection use cases, response playbooks and technologies.
• Develop and present CSOC metrics and incident reports to business and IT stakeholders.
• Act as the lead for the Cyber Incident Management Team (IMT) during material cyber security incidents, lead the development of the incident response strategy and its implementation, and oversee recovery.
• Lead collaboration with the Cyber Defence Engineering Team to uplift threat detection use cases, response playbooks, threat intelligence and related capabilities.
• Provide input into the overall cybersecurity strategy and investment decisions based on insights gathered from cybersecurity incident data.

• Bachelor's and/or postgraduate degree from a highly accredited university in Computer Science, Information Technology, Software Engineering, Cyber Security or a similar field.
• Minimum of 15 years of work experience in a related field, with at least 5 years leading and managing teams.
• Strong experience covering technologies required for operating a CSOC, such as cyber threat intelligence, threat detection, cyber security incident response and case management.
• Strong experience covering technologies and required operating procedures for cyber threat intelligence, security monitoring and cyber security incident response.
• Experience in technology and cyber risk management, including familiarity with frameworks such as ISO 27001, NIST CSF or MITRE ATT&CK.
• Experience in building relationships with stakeholders and facilitating effective discussions across levels.
• High degree of logical and analytical thinking skills.
• Excellent interpersonal, collaborative and communication skills.

• Relevant certifications such as CISSP, CISM, GCIA, GCIH or GSOC.

• Competitive salary and benefits package.
• Dynamic working environment.
• Development opportunities.

It is Hong Kong's largest single taxpayer and one of the city's major employers, and its Charities Trust is one of the world's leading charity donors.