Security Project Manager

In this position, you will : Converged Security Strategy : Design and oversee a unified security posture that protects both the Enterprise IT network and the OT environment (SCADA, PLCs, and Building Automation). Client Relationship Management: Act as the lead Security Subject Matter Expert (SME) in client steering committees, translating complex technical risks into business-impact narratives.

Security Lifecycle Management : Own the security roadmap from project inception through deployment, ensuring that security is "baked in" rather than "bolted on." Regulatory & Contractual Mastery : Fulfilling the international compliance standards (e.g ISO 27001, IEC 62443, NIST SP 800-82) and client-specific Security Service Level Agreements (SLAs), demonstrating mastery across Management, IT Security, and Industrial Control Systems (subset of OT).

Network Segmentation : Implement and maintain robust network architectures using the Purdue Model to isolate critical industrial controls from the public internet. Vulnerability & Patch Management : Coordinate specialized patching cycles for IT assets and develop "compensating controls" for legacy OT hardware that cannot be easily updated.

Unified Incident Response : Develop and test "Cyber-Physical" response playbooks to handle scenarios where a digital breach (e.g., Ransomware) affects physical safety or production uptime. Asset Integrity: Oversee the security of IoT/ industrial IoT sensors, edge computing devices, and traditional server infrastructure.

To be successful in this position, you should meet the following requirements: Possess at least a Bachelor’s or Master’s degree in Computer Science, Engineering, or Security Management At least ten years in security management with a focus on large-scale infrastructure or industrial customer projects Demonstrated expertise in Information technology (IT) security including but not limited to Zero Trust, Firewalls, Cloud etc.

Demonstrated expertise in Operational Technology (OT), specifically within the Industrial Control Systems (ICS) subset, including industrial protocols such as Modbus and Profinet The ideal candidate will possess a "Converged Stack" of certifications, demonstrating mastery across Management, IT Security, and Industrial Control Systems (OT) Relevant certifications PMP CISSP CISM are a must ; others (GICSP, ISA/IEC 62443 Cybersecurity Specialist, GRID, CCSP, CISA) are highly desired, preferred and considered a plus When you work: 5 days work 8 hours/day What you enjoy: Discretionary Performance bonus Life insurance Medical insurance Education subsidies Birthday gift Marriage leave Birthday leave Staff discount CMHK is committed to be an equal opportunity employer.

We offer exceptional benefits package and the opportunity to work in a challenging environment. Personal data provided by applicants will be treated strictly in accordance with our personal data policy and for recruitment purposes only.