Cyber Security Strategist

About the Role

We are seeking an experienced Cyber Security Strategist to join our rapidly growing Cyber Protect team in Hong Kong. As a key member of our team, you will play a critical part in shaping our Cyber Protect offering and expanding our capability in the region.
Key Responsibilities
• Client Project Delivery
• Programme and project management of digital risk advisory engagements, including senior stakeholder engagement, programme scoping, budget management, and issue resolution.
• Delivering strategy and transformation projects, such as helping clients define and develop robust digital security strategies, conducting risk assessments, and supporting cyber due diligence projects.
• Supporting clients as a senior advisor throughout their digital security transformation.
• Working with senior project stakeholders to gather information, present findings, and maintain client confidence through clear communication and exceptional project management skills.
• Collaborating with external technical partners to deliver integrated solutions and drawing out recommendations from their technical findings.
• Business Development
• Developing proposals for future client work.
• Cultivating long-term relationships with clients.
• Participating in marketing and speaking events to build the Control Risks brand.
• Project and programme scoping and planning to support pricing and project budget.
• Contributing to and building complex, multi-service line proposals.
• Supporting the Growth of the Cyber Practice
• Managing and mentoring team members.
• Helping to refine our cyber security methodologies and approaches.
• Contributing to our professional development and training programme.
• Educating other departments about cyber security and the services we provide.
• Identifying and hiring local talent into the Cyber Security team.

Requirements
• Considerable experience of cyber security risk management within an established consultancy.
• Ability to see security from the attacker's point of view and articulate enterprise risks to senior non-technical audiences.
• Proven experience in reviewing, designing, and implementing cyber security strategy projects for clients.
• Proven experience in delivering risk assessments against industry standards, such as NIST CSF and ISO.
• Proven experience working with China's information handling and technology regulations and standards.
• Broad corporate experience and understanding of the interaction between departments and levels of governance within a commercial organisation.
• Excellent knowledge of IT and OT network infrastructure.
• Undergraduate or postgraduate degree in a field related to security, information security, intelligence, or computer science.
• CISSP, CISM, ISO27001 lead auditor, SANs, or similar industry qualifications/certifications.
Preferred
• Native or documented fluency in Mandarin.
Benefits
• Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.
• We operate a discretionary global bonus scheme that incentivises and rewards individuals based on company and individual performance.
• Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.
• As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process.