Deputy Executive Manager, Security Operations Centre

Leads the Cyber Security Operations Centre (CSOC) within the Cyber Security Department of The Hong Kong Jockey Club's IT Division. The department safeguards information assets, IT systems, networks and cloud platforms, and ensures the resilience and continuity of critical operations. The role involves managing the CSOC team and external MSSPs, overseeing cyber security incident response, and driving improvements in detection, response and threat intelligence.

• Manage the CSOC Team, including hiring, training, coaching, objective setting and performance evaluations.
• Manage external MSSPs, ensuring appropriate service level performance is established, monitored and met.
• Provide oversight on the handling of cyber security incidents, ensuring adequate and appropriate resources are available for timely and effective resolution.
• Continuously identify control gaps and improvement initiatives to uplift CSOC and cyber security incident response processes, detection use cases, response playbooks and technologies.
• Develop and present CSOC metrics and incident reports to business and IT stakeholders.
• Act as lead for the Cyber Incident Management Team (IMT) during material cyber security incidents, lead the development of the incident response strategy and its implementation, and oversee recovery.
• Lead collaboration with the Cyber Defence Engineering Team to uplift threat detection use cases, response playbooks and threat intelligence.
• Provide input into the overall cybersecurity strategy and investment decisions based on insights gathered from cyber security incident data.

• Bachelor's and/or postgraduate degree from a highly accredited university in Computer Science, Information Technology, Software Engineering, Cyber Security or a similar field.
• Minimum of 15 years of work experience in a related field, with at least 5 years leading and managing teams.
• Strong experience covering technologies and required operating procedures for the CSOC, including Cyber Threat Intelligence, Threat Detection, Security Monitoring, Cyber Security Incident Response and Case Management.
• Experience in technology and cyber risk management, including familiarity with frameworks such as ISO27001, NIST CSF or MITRE ATT&CK.
• Experience in building relationships with stakeholders and facilitating effective discussions across levels.
• High degree of logical and analytical thinking skills.
• Excellent interpersonal, collaborative and communication skills.

• Relevant certifications such as CISSP, CISM, GCIA, GCIH or GSOC are preferred.

• Shenzhen

• Competitive salary and benefits packages.
• Dynamic working environment.
• Development opportunities.