HKMC Annuity Limited, a wholly-owned subsidiary of The Hong Kong Mortgage Corporation Limited, is an authorized insurer to carry on long term insurance business and facilitate retirement financial planning through the provision of annuity products in Hong Kong.

Job Descriptions:

1. To assist in the governance of cybersecurity risk matters for presentation to relevant risk committees and the Board of Directors;
2. To provide professional security advisories and recommendations for IT solutions and systems;
3. To oversee the implementation of new cybersecurity regulations, ensuring IT risk controls are up-to-date and compliant;
4. To conduct security and cloud risk assessment on systems and/or technical controls to identify potential security threats and vulnerabilities, and to develop strategies for risk mitigation;
5. To maintain security risk register, and communicate the identified risks and impacts to the stakeholders;
6. To collaborate with other subject matter experts on managing security assessments and oversee penetration testing, threat intelligence simulation attack;
7. To manage and provide timely advices for IT security incidents;
8. To periodically review and update security policies, operational process for security control enhancement; and
9. To perform other ad hoc duties as assigned from time to time.

Requirements:

1. Degree holder in Information Security, Computer Science, Information Management Systems, Risk Management or equivalent;
2. A minimum of 8 years of experience in the field of information security, security risk or related disciplines;
3. Familiar with regulations of insurance or financial services industry, in particular of IT related requirements;
4. In-depth understanding of cloud security principles and best practices, with experience in securing cloud environments;
5. Solid understanding of application security, including secure coding practices, vulnerability assessment, and secure deployment methodologies;
6. Demonstrated track record in leading and implementing successful information security initiatives programs;
7. Relevant certifications (e.g., CISSP, CISA, OSCP, CEH, ISO 27001, NIST, or equivalent) is an advantage; and
8. Good command of both written and spoken English and Chinese.

(Candidates with less experience will be considered as Manager.)

Interested parties please send your full resume stating your current and expected salary by 26 July 2026.

Please visit https://www.hkmca.hk/eng/about_us/careers.html for other application methods.

Please ensure that all information provided to the HKMCA is accurate, complete and updated. Data provided which is inaccurate, misleading or incomplete may influence the process and outcome of the recruitment exercise. Please read the HKMCA Personal Information Collection Statement for Recruitment of Prospective Staff Members and Licensed Individual Insurance Agents at the HKMCA website before completing the application form. Personal data collected will be used for recruitment purposes only. Candidates not invited for interview within 8 weeks may consider their application unsuccessful.