Senior Manager, IT Governance and Architecture

Senior Manager, IT Governance and Architecture (Ref: R5739) The West Kowloon Cultural District Authority welcomes exceptional talent with a passion to realize the vision and mission of making the West Kowloon Cultural District a prime local and international destination for arts, culture and entertainment. Overview The Senior Manager, IT Governance and Architecture will lead the Authority’s critical infrastructure and systems protection, and formulate the overall computer system security management plan and operation models as the organization-level security governance framework to safeguard the robustness and security of computing systems in the enterprise architecture. Responsibilities Perform and coordinate assessment activities regarding the organization’s security posture against regulatory requirements and industry best practices, to identify areas for improvement. Devise and organize effective measures to strengthen the current security management landscape, ensuring compliance with legislative and governance requirements including critical infrastructure and public-facing IT system protection. Act as the contact point with the Commissioner’s Office for Critical Infrastructure Protection (under Security Bureau) and other governmental or statutory bodies to facilitate collaboration and incident reporting. Establish and maintain a pragmatic incident response plan to effectively manage and mitigate cybersecurity incidents. Provide regular updates to IT management regarding the organization’s risk posture and cybersecurity incidents. Identify stakeholders and manage their expectations through effective communication and relationship management. Assess and manage third‑party vendors and service providers to ensure they adhere to the organization’s cybersecurity standards. Organize training activities to promote the value and importance of cybersecurity, ensuring awareness and best practices across the organization. Perform any other duties reasonably assigned by the Authority. Qualifications Possess a Bachelor’s degree in Information Technology, Cybersecurity, or a related field; a Master’s degree is preferred. Minimum of 10 years of IT experience, including at least 5 years in security governance or management roles, with a demonstrable track record of managing security audits, risk assessments, threat mitigation and incident response processes. Relevant certifications such as CISSP, CISM, CISA, or equivalent. Strong knowledge of security frameworks (e.g., NIST, ISO 27001), risk management processes, and current cybersecurity threats and trends. Excellent knowledge of applicable laws, regulations, and industry standards related to information and cyber security domains. Proven ability to lead and influence team members to achieve common goals. Excellent verbal and written communication skills, with the ability to articulate complex technical concepts to non‑technical stakeholders. Application Process For interested parties, please submit your application with a detailed CV as soon as possible. The review of applications will continue until the position is filled. Data collected will only be used for job application processing. Your data may be accessed by our appointed recruitment consultants who have agreed to keep the confidentiality of all personal data in accordance with applicable standards. Applicants not invited for an interview within 4 weeks from the submission date may assume that their application was unsuccessful. Personal data will be retained for up to 24 months and then destroyed. Equal Opportunity Employer We are an equal opportunity employer and do not discriminate on the basis of race, color, religion, sex, national origin, disability, or other protected status. #J-18808-Ljbffr