Description

Digital Core - Security Transformation Manager

As a member of the Greater China Cybersecurity team, you will help clients strengthen their cybersecurity posture through the design, implementation, and continuous improvement of security controls and architectures. Working closely with client CISO leadership and global cybersecurity experts, you will deliver solutions that protect critical information assets, address regulatory requirements, and enable business growth and resilience.

Job duties of this Role:

• Technical Implementation: Assist in the deployment and configuration of security controls across cloud, on-premises, and hybrid environments, following established architecture frameworks and security standards.

• Security Operations: Monitor and respond to security events and incidents, supporting incident response activities and root cause analysis under the guidance of senior team members.

• Platform Security: Collaborate with platform and engineering teams to embed security requirements throughout the technology lifecycle, ensuring secure-by-design principles are applied.

• Continuous Improvement: Contribute to the review and enhancement of security processes, controls, and technologies. Stay current with emerging threats and recommend improvements.

• Documentation & Reporting: Maintain accurate documentation of security controls, incidents, and operational processes. Prepare clear, concise reports for management and stakeholders as required.

• Stakeholder Engagement: Communicate technical risks and issues to both technical and non-technical audiences. Build effective working relationships across technology and business teams.

• Professional Development: Participate in training and development opportunities to build cybersecurity expertise and stay up to date with industry best practices.

• Client Advisory & Business Development: Support client engagements by understanding business and cybersecurity challenges, contributing to solution development, and presenting recommendations to stakeholders. Participate in business development activities, including proposal development, client presentations, and relationship building.

Come JOIN US if you have:

• 10+ years of experience in cybersecurity, technology consulting, or information security, with a strong track record of delivering security solutions and advisory services.

• Working knowledge of cybersecurity frameworks (e.g., NIST, ISO 27001) and security technologies.

• Experience in security operations, incident response, cybersecurity engineering, or related technical domains.

• Strong analytical, problem-solving, and critical-thinking skills.

• Effective written and verbal communication skills, with the ability to engage both technical and non-technical stakeholders.

• Proven ability to collaborate in diverse, cross-functional, and global team environments.

• Relevant security certifications (e.g., CompTIA Security+, SSCP, CISSP, or CISM) are preferred.

• Proactive and resilient self-starter with a can-do attitude, strong client engagement skills, and the ability to build trusted relationships with stakeholders and clients.