The Hong Kong Jockey Club

Founded in 1884, The Hong Kong Jockey Club (“the Club”) is a world-class racing club that acts continuously for the betterment of our society. The Club has a unique integrated business model, comprising racing and racecourse entertainment, a membership club, responsible sports wagering and lottery, and charities and community contribution. Through this model, the Club generates economic and social value for the community and supports the HKSAR Government in combatting illegal gambling.

Who are we?

We are the IT Division of HKJC, a vibrant community of over 1,500 dedicated professionals working collaboratively across Hong Kong and Shenzhen.

Our team is a diverse mix of individuals from various backgrounds, from all across the world. We embrace our humanity, recognizing that each of us brings unique strengths and perspectives. This diversity not only enriches our work environment but also drives our innovation and creativity as we strive to achieve our collective goals.

What do we do?

We design, build, and operate the technology that powers the Club. Our primary focus is on delivering the service that supports our hospitality, racing and wagering operations, to ensure that our customers and members enjoy exceptional experiences.

We also deliver the changes necessary to drive business growth through new products and services. And, we are committed to safeguarding the Club by protecting it from external threats, providing a secure and resilient technological environment.

The Department

The Cyber Security Department is essential to the Club’s ongoing success, safeguarding information assets, IT systems, networks, and cloud platforms while ensuring the resilience and continuity of critical operations. Through the implementation of strong risk governance frameworks and cybersecurity standards, the department protects the Club against emerging threats and ensures compliance with regulatory requirements in Hong Kong and China.

As the first line of defense, the department plays a key role in maintaining the Club’s reputation and operational resilience. Its core responsibilities include identifying and addressing vulnerabilities, protecting sensitive information, ensuring rapid incident response, overseeing access management, and promoting Club-wide cybersecurity awareness.

The Job

• Lead the technical planning and design, and monitor the implementation and delivery of cybersecurity projects that uplift our cyber controls to protect the Club’s information systems and assets
• Provide advisory and consultation on a broad spectrum of security technologies, particularly with deep knowledge and experience in designing and implementing them
• Responsible for the Cyber Security Delivery Book of Work (BoW), managing and allocating adequate and appropriate security delivery resources across the security projects. Ensure consistent application and adherence to security delivery principles and quality
• Promote secure by design and ensure alignment with the established cybersecurity architecture principles and standards across all cybersecurity projects
• Ensure the delivery of security projects is in line with the Club’s Product Development Lifecycle (PDLC) Methodology and Processes, where applicable
• Collaborate across the operational and business teams to understand and capture their requirements and pain points and embed them into the security design and implementation plan
• Create and foster a diverse and inclusive culture with trust and respect to attract, develop and retain talents – and create an environment that would encourage innovation. Serve as a role model to support cross-functional efforts and model collaborative behaviours

About You

• University degree in Computer Science, Information Technology, Cyber Security, or a related field
• Industry-relevant certifications such as CISSP, CISM, and TOGAF are preferred
• 10+ years of experience in cybersecurity roles, specifically in cybersecurity delivery
• Strong domain knowledge and hands-on experience across three (3) or more of the following domains:
  • Identity & Access Management
  • Application & Infrastructure Vulnerability Management
  • Endpoint & Server Security
  • Network, Web & Email Security
  • Data Security
  • Cloud Security
• Experience in vendor engagement and integration of security solutions across platforms
• Excellent communication and written skills, with the ability to translate technically complex concepts for diverse audiences
• Strong organisational and multitasking abilities with meticulous attention to detail

Apply Now!

We offer competitive salary and benefits packages, a dynamic working environment and development opportunities.

Add horsepower to your career today. Click the “Apply Now” button to create an account and submit your application.

Equal Opportunity and Inclusive Hiring

We are an equal opportunity employer and strive to create an inclusive workplace for all. Applicants from diverse backgrounds are welcomed to apply. If you have any special needs or require accommodations during the interview process, please e-mail us via [email protected]. Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and job applicants relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.