Technical Manager, Cyber Threat Intelligence

The Hong Kong Jockey Club

Founded in 1884, The Hong Kong Jockey Club (“the Club”) is a world-class racing club that acts continuously for the betterment of our society. The Club has a unique integrated business model, comprising racing and racecourse entertainment, a membership club, responsible sports wagering and lottery, and charities and community contribution. Through this model, the Club generates economic and social value for the community and supports the HKSAR Government in combatting illegal gambling.

Who are we?

We are the IT Division of HKJC, a vibrant community of over 1,500 dedicated professionals working collaboratively across Hong Kong and Shenzhen.

Our team is a diverse mix of individuals from various backgrounds, from all across the world. We embrace our humanity, recognizing that each of us brings unique strengths and perspectives. This diversity not only enriches our work environment but also drives our innovation and creativity as we strive to achieve our collective goals.

What do we do?

We design, build, and operate the technology that powers the Club. Our primary focus is on delivering the service that supports our hospitality, racing and wagering operations, to ensure that our customers and members enjoy exceptional experiences.

We also deliver the changes necessary to drive business growth through new products and services. And, we are committed to safeguarding the Club by protecting it from external threats, providing a secure and resilient technological environment.

The Department

The Cyber Security Department is essential to the Club’s ongoing success, safeguarding information assets, IT systems, networks, and cloud platforms while ensuring the resilience and continuity of critical operations. Through the implementation of strong risk governance frameworks and cybersecurity standards, the department protects the Club against emerging threats and ensures compliance with regulatory requirements in Hong Kong and China.

As the first line of defense, the department plays a key role in maintaining the Club’s reputation and operational resilience. Its core responsibilities include identifying and addressing vulnerabilities, protecting sensitive information, ensuring rapid incident response, overseeing access management, and promoting Club-wide cybersecurity awareness.

The Job

• Monitor and assess geopolitical developments, cyber threats, and adversary activity relevant to Hong Kong and the Greater China region
• Identify emerging threats and trends that may affect the Club, its operations, or its technology environment
• Apply established cyber threat intelligence principles, analytical methodologies, and intelligence tradecraft standards to assess threats within a commercial or public sector environment
• Evaluate the reliability, relevance, and potential impact of intelligence from internal and external sources
• Collect, validate, analyse, and convert raw cyber threat data into actionable intelligence
• Produce written assessments, intelligence reports, indicators of compromise, and tactical intelligence data to support defensive operations
• Ensure intelligence products are accurate, timely, relevant, and tailored to the needs of their intended audiences
• Research and assess regional cyber adversaries, advanced persistent threat groups, and associated campaigns
• Analyse adversaries’ motivations, capabilities, targets, infrastructure, and operational patterns
• Assess the relevance and potential impact of adversary activity on the Club
• Identify and evaluate adversary tactics, techniques, and procedures relevant to Hong Kong, Greater China, and the Club’s operating environment
• Map observed adversary behaviours to frameworks such as MITRE ATT&CK
• Identify opportunities to improve security monitoring, detection, prevention, and response capabilities
• Use recognised analytical models and frameworks, including MITRE ATT&CK, the Pyramid of Pain, the Diamond Model, and the Cyber Kill Chain, to structure intelligence analysis
• Apply these frameworks to understand adversary behaviour and support threat-informed defensive decision-making
• Evaluate information security and information technology threats, attacks, and vulnerabilities
• Determine their relevance, severity, likelihood, and potential impact on the Club
• Provide risk-based recommendations to support appropriate prioritisation and remediation
• Apply knowledge of computer network protocols and operations to identify, interpret, and assess suspicious or malicious activity
• Correlate network-based observations with other intelligence sources to identify potential threats, campaigns, or adversary behaviours
• Translate intelligence findings into practical defensive strategies, security control recommendations, detection opportunities, and prioritised actions
• Provide intelligence that supports cybersecurity operations, incident response, threat hunting, vulnerability management, and security engineering teams
• Recommend measures to harden systems, reduce the attack surface, and disrupt adversary activity
• Create concise briefings, presentations, reports, and other intelligence products for technical and executive audiences
• Clearly communicate threat analysis, emerging trends, potential impacts, defensive strategies, and recommended priorities
• Present cyber threat intelligence assessments to technical teams, business stakeholders, and executive leadership
• Support the integration of threat intelligence into defensive controls, operational processes, and security priorities

About You

• A high school diploma or a bachelor’s degree in any discipline from an accredited educational institution
• Relevant cybersecurity or cyber threat intelligence certifications are preferred, including:
  • CPTIA: CREST Practitioner Threat Intelligence Analyst
  • CRTIA: CREST Registered Threat Intelligence Analyst
  • C|TIA: Certified Threat Intelligence Analyst
  • RCIA: Rocheston Cyberthreat Intelligence Analyst
  • GCTI: GIAC Cyber Threat Intelligence
• Two to five years of relevant professional experience in cybersecurity
• At least one year of specialised experience in cyber threat intelligence
• Experience in geopolitical and cyber threat intelligence relating to Hong Kong and Greater China
• Experience applying cyber threat intelligence analysis principles within a public sector or commercial environment
• Experience creating and delivering concise briefings, presentations, and reports to technical teams and executive leadership
• Ability to communicate threat analysis, emerging trends, impacts on potential targets, defensive strategies, and recommended priorities
• Knowledge of information security and information technology threats, attacks, and vulnerabilities within a cybersecurity context
• Knowledge of cyber adversaries associated with Hong Kong and Greater China, including their tactics, techniques, and procedures
• Ability to convert raw cyber threat data into actionable intelligence in both written narrative and tactical data formats
• Ability to apply recognised intelligence analysis tradecraft standards
• Knowledge of computer network protocols and operations
• Knowledge of advanced persistent threats, threat actors, and cyber campaigns
• Knowledge of analytical threat models and frameworks, including MITRE ATT&CK, the Pyramid of Pain, the Diamond Model, and the Cyber Kill Chain
• Excellent verbal and written communication, problem-solving, and analytical skills
• Ability to communicate complex technical information to both technical and non-technical audiences
• Ability to work collaboratively with cybersecurity operations, incident response, threat hunting, vulnerability management, and cyber defence engineering teams

Apply Now!

We offer competitive salary and benefits packages, a dynamic working environment and development opportunities.

Add horsepower to your career today. Click the “Apply Now” button to create an account and submit your application.

Equal Opportunity and Inclusive Hiring

We are an equal opportunity employer and strive to create an inclusive workplace for all. Applicants from diverse backgrounds are welcomed to apply. If you have any special needs or require accommodations during the interview process, please e-mail us via [email protected]. Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and job applicants relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.