Title: Assistant Vice President, Cybersecurity

Post on: Aug 20, 2026

Location:

HK

Sumitomo Mitsui Banking Corporation (三井住友銀行) (incorporated in Japan with limited liability) is one of the major international banks and a leading arranger of specialized financial products worldwide. The Bank's Hong Kong Branch is now seeking high calibre individuals with long-term career objectives to apply for the following position:

Assistant Vice President, Cybersecurity -

Security & Architecture Group (HK) - IT Security Group

Job Duties & Responsibilities:

Coordinate regulatory, APAC and Head Office security assessments to ensure effective security controls
Establish and maintain cybersecurity policies and standards
Manage implementation and operation of security systems and controls
Drive and coordinate security hardening and vulnerability management initiatives
Enhance cybersecurity awareness and promote security culture across the organization
Monitor cyber threats intelligence, market trends and emerging cyber risks
Coordinate and support cyber incident management, response and reporting

Requirements:

Degree holder in IT, Cybersecurity or related disciplines
Minimum 8 years’ experience in IT industry, preferably with 5 years’ experience in cybersecurity and risk management
Experience in supporting security assessment and security systems implementation
Banking industry experience and familiar with HKMA requirements are preferable
Holder of CISA / CISM / CISSP or other HKMA ECF-C recognized certificate is preferred
Able to work independently with good communication and analytical skills
Fluency in English and Cantonese. Knowledge in Mandarin would be a plus

Please apply with detailed resume stating latest and expected salary.

SMBC is an equal opportunity employer. We are committed to fostering a diversified and inclusive workplace and removing barriers to provide equal access to employment.

Note on Mandatory Reference Check ("MRC") Scheme:

The MRC Scheme seeks to address the "rolling bad apples" phenomenon in the banking sector in Hong Kong, i.e. situations where individuals who engage in misconduct during their employment in one institution are able to obtain subsequent employment in another institution without disclosing their misconduct to the new employer. Against this background, the HKMA proposed a framework to facilitate Authorized Institutions ("AIs") to bilaterally obtain reference information during their recruitment process for certain positions, such that misconduct information in an individual's previous employments can be provided to AIs to inform their employment decisions.

For in-scope positions, satisfactory completion of MRC process is pivotal for the consideration of employment decision. For details, you may visit HKMA's website and refer to the latest FAQs issued by HKAB. Further details will be shared on request if your application is being proceeded.

Application details will be used only for recruitment purposes, and will be destroyed after 1 year. Applicants not contacted after 6 weeks may consider their applications unsuccessful.

Job Function: Security & Architecture Group (HK) - IT Security G