Assistant Manager - Cyber Security Ops
Leads the Security Operations Center for Galaxy Entertainment Group in Taipa, Macau — monitoring, responding to, and investigating cyber incidents, tuning SIEM/SOAR detections, and threat hunting, while mentoring analysts and coordinating audits. Core stack includes SIEM/SOAR, EDR, IDS/IPS, forensic tools, and NIST/MITRE ATT&CK frameworks.
- Compensation
- Not disclosed
- Location
- 氹仔 / Taipa
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in computer science, computer engineering, systems analysis, or related field, or equivalent experience
- 4+ years in cybersecurity with at least 2 years in incident response, threat hunting, and/or SOC management
- Knowledge of threat intelligence, malware analysis, network and cloud security, MITRE ATT&CK, and cyber kill chain
- Hands-on proficiency with forensic tools, EDR, IDS/IPS, and vulnerability management solutions
- Advanced SIEM administration experience: log collection, detection rule optimization, threat hunting, case reporting, dashboards
- CISSP or CISM or GCIH or CEH certification
- Excellent written and verbal communication and incident reporting in English and Chinese
- Good leadership, planning, and organizational skills
- Strong interpersonal, teamwork, facilitation, and negotiation skills
- Strong analytical and technical skills; ability to translate business needs into technical requirements
- Ability to work under pressure and react quickly to critical cybersecurity incidents
- Commitment to continuous learning in threat detection and incident response
- Experience collaborating with SOC or third-party security vendors
Nice to have
- Familiarity with cloud security (AWS, Azure, GCP), container security, WAFs, and proxies
- Experience managing high-impact incident response in multi-location and/or hybrid cloud environments
- Cantonese and/or Mandarin proficiency
- Strong scripting and automation capabilities (Python, PowerShell, Bash)
- CRISC or CISA certification
Full description
Position Summary
The Assistant Manager - Cyber Security Ops - Tech Risk & Security Assessment is responsible for leading enterprise-wide cybersecurity risk assessments, vulnerability management, and compliance initiatives. The role ensures that security risks are identified, assessed, and mitigated in alignment with organizational risk appetite and regulatory requirements. This position acts as a key liaison between cybersecurity, IT, and business stakeholders to strengthen the overall security posture.
Primary Responsibility
Contribute the team working as the cyber security “Subject Matter Expert” and "Advisor" for GEG covering:
- Cyber Risk Assessment & Analysis
- Conduct enterprise-wide cybersecurity risk assessments
- Perform cyber, tech and business impact and risk analysis
- Develop risk treatment and remediation plans
- Vulnerability Management
- Support in the identification of vulnerabilities through scanning and threat intelligence
- Prioritize risks based on severity and business context
- Track and oversee remediation activities
- Security Governance & Compliance
- Ensure compliance with frameworks (ISO 27001, NIST CSF, PCI-DSS, etc.)
- Support internal/external audits
- Review and manage policy exceptions
- Security Advisory & Solution Review
- Perform security assessments on new systems and cloud services
- Provide secure design and architecture recommendations
- Security Awareness & Testing
- Design and execute social engineering simulations
- Support cybersecurity awareness programs
- Stakeholder Engagement
- Collaborate with IT and business teams to align risk treatment
- Communicate risks to senior and non-technical stakeholders
Requirements
Must-Have Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience)
- Minimum 4+ years of experience in:
- Cybersecurity risk assessment
- Vulnerability management
- Security compliance or audit support
- Hands-on experience with:
- Risk assessment methodologies
- Vulnerability scanning and remediation processes