Assistant Manager - IT Security

Hang Lung Group Limited (SEHK stock code: 00010) has been engaged in real estate development since 1960. Through its subsidiary Hang Lung Properties Limited (SEHK stock code: 00101), the Group manages a portfolio of over 3.5 million square meters of retail, office, residential, and hotel properties across Hong Kong and the Chinese Mainland. The Group’s diverse portfolio in Hong Kong includes office towers and malls in prime districts, as well as luxury residential developments in prestigious areas. In the Mainland, under the signature “66” brand, the Company’s mixed-use and retail developments are regarded as premium landmarks, strategically located in the hearts of key cities of Shanghai, Shenyang, Jinan, Wuxi, Tianjin, Dalian, Kunming, Wuhan, and Hangzhou. Our people are the precious asset of the Hang Lung family and the key to our success. They drive forward our development through their commitment, professionalism and caring services. As we extend our business horizons, we continue to devote significant resources and energy to developing the expertise and skills of our outstanding team. Integrity, Sustainability, Excellence, and Openness are at the heart of who we are. If you share these values, you could be the talent we are looking for. Join us and grow with us. Job Summary: Reporting to the Senior Manager – IT Security, the Infra Security Manager Leads the planning, delivery and continuous improvement of infrastructure security projects, drawing a solid technical background to guide solution evaluation, implementation and technical decision-making. The role is responsible for project scope, priorities, schedules, resources and delivery quality. Working with IT teams and vendors, the role ensures that secure-by-design principles and agreed security requirements are translated into practical architecture and technical controls across on-premises, cloud and SaaS environments, supported by risk assessments and continuous improvement. Job Duties: Lead the continuous improvement projects of Infrastructure Security practices across key technology domains, including networks, endpoints, servers, operating systems, identity, cloud platforms and SaaS environments. Lead end-to-end infrastructure and cloud security projects to address identified gaps and risks. Define scope, deliverables, milestones, resource needs, budgets and acceptance criteria; coordinate solution evaluation, tool selection, architecture design, engineering implementation and testing; and manage dependencies, risks, issues and changes through operational handover and post-implementation review. Collaborate with the respective IT teams to identify security exposures, define practical remediation plans, assign appropriate owners, track remediation progress, and validate that the attack surface and cyber risks are effectively reduced. Plan and balance resources across security projects and ongoing operations, oversee work quality and delivery, and resolve competing priorities. Ensure that project handovers include agreed operational ownership, documentation, knowledge transfer and backup arrangements for critical infrastructure security responsibilities. Act as the subject matter expert for Vulnerability Management, Privileged Access Management, and security configuration hardening. Lead security configuration hardening and compliance checks across cloud platforms, including Alibaba Cloud, AWS and Azure, as well as servers, databases and networks, to ensure that identified risks are properly assessed and reduced to an acceptable level. Perform security risk assessments of IT systems during solution design, onboarding, major changes and migrations to identify security weaknesses and non-compliance, covering areas such as authentication, authorization, access control, network segmentation, data protection, logging and monitoring, and trust boundaries. Identify and drive RPA and automation opportunities across Infrastructure Security processes to improve operational efficiency, control effectiveness and data quality, as well as the processes in other security sub-team, such as SOC, GRC. Occasional business trip is required. Requirements: Bachelor's Degree holder. 8+ years of IT security experience, including at least 2 years of delivering security projects. Experience of coordinating cross-functional teams and vendors through implementation and operational handover is an advantage. Experience in the property management industry is an advantage. Holding professional security certifications, i.e. CISSP, CCSP, CISM. Relevant certifications in infrastructure security, cloud security or security architecture would be an additional advantage. Project management capability is required, including defining scope and delivery plans, coordinating resources and vendors, managing schedules, budgets, dependencies, risks and changes, and reporting progress to stakeholders. Able to manage multiple concurrent infrastructure security initiatives through acceptance and operational handover. Understanding of common attack paths and risk patterns, with hands-on experience applying frameworks such as the Cyber Kill Chain and MITRE ATT&CK or equivalent approaches, to assess and implement preventive, protective and detective controls, including NGFW, IDS/IPS, EDR, FIM, HIPS and MDM/MAM. Demonstrated understanding of various domains in infrastructure security, e.g., endpoint security, identity security, network security, email security, etc. Experience in at least one of the following areas is required: Vulnerability Management, Privileged Access Management, infrastructure or cloud security architecture/engineering, or security configuration hardening. Experience in RPA or security automation would be an advantage. Ability to define, implement, and oversee layered security controls across production systems, cloud and platform configurations, security logging and monitoring, and infrastructure protection technologies, using risk-based requirements and measurable indicators to evaluate control effectiveness. A strong team player with good analytical and problem-solving skills. Good communication skills; able to clearly communicate security risks/concepts to technical teams and non-technical stakeholders. Good English and Mandarin Chinese language skills. Embracing our values of integrity, sustainability, excellence and openness. We are an equal opportunity employer and are committed to fostering a diverse workforce and an inclusive workplace where employees are treated with respect. We welcome applications from all qualified candidates regardless of race, ethnicity, color, gender, age, religion, disability, marital status, or any other characteristic protected by PRC law. If you have specific needs that require reasonable accommodation during the recruitment process, please let us know. Personal Information Collection Statement (For recruitment purposes) Information collected by Hang Lung Properties Limited and/or its associated companies will be treated in strict confidence and will be used exclusively for recruitment and other employment-related purposes. Information collected may be disclosed to such person or organization for the purpose of verifying the accuracy of the information provided by the applicant. The provision of true, complete and accurate information required in support of applications is necessary for selection purposes. Failure to do so may affect the processing and outcome of your application. Applicants who do not hear from us within 8 weeks from the date of application may consider their applications unsuccessful and their personal data will typically be destroyed within 12 months after rejection of the application.