Job Description

The Hong Kong Jockey Club

Founded in 1884, The Hong Kong Jockey Club (“the Club”) is a world-class racing club that acts continuously for the betterment of our society. The Club has a unique integrated business model, comprising racing and racecourse entertainment, a membership club, responsible sports wagering and lottery, and charities and community contribution. Through this model, the Club generates economic and social value for the community and supports the HKSAR Government in combatting illegal gambling.

Who are we?

We are the IT Division of HKJC, a vibrant community of over 1,500 dedicated professionals working collaboratively across Hong Kong and Shenzhen.

Our team is a diverse mix of individuals from various backgrounds, from all across the world. We embrace our humanity, recognizing that each of us brings unique strengths and perspectives. This diversity not only enriches our work environment but also drives our innovation and creativity as we strive to achieve our collective goals.

What do we do?

We design, build, and operate the technology that powers the Club. Our primary focus is on delivering the service that supports our hospitality, racing and wagering operations, to ensure that our customers and members enjoy exceptional experiences.

We also deliver the changes necessary to drive business growth through new products and services. And, we are committed to safeguarding the Club by protecting it from external threats, providing a secure and resilient technological environment.

The Department

The Cyber Security Department is essential to the Club’s ongoing success, safeguarding information assets, IT systems, networks, and cloud platforms while ensuring the resilience and continuity of critical operations. Through the implementation of strong risk governance frameworks and cybersecurity standards, the department protects the Club against emerging threats and ensures compliance with regulatory requirements in Hong Kong and China.

As the first line of defense, the department plays a key role in maintaining the Club’s reputation and operational resilience. Its core responsibilities include identifying and addressing vulnerabilities, protecting sensitive information, ensuring rapid incident response, overseeing access management, and promoting Club-wide cybersecurity awareness.

The Job

• Ensure security controls are embedded into the design, implementation, and operation of the Club’s cloud and hybrid technology platforms (including cloud workloads, containers, and supporting infrastructure)
• Ensure effective operation of cloud, platform, and network security controls and services in alignment with the Club’s security policies and standards (and continuously identify security control gaps, misconfigurations, and improvement opportunities)
• Support the governance and administration of cloud security services and network security controls (including cloud-native security tools, web application firewalls (WAF), API security, DDoS protection, firewalls, and IDS/IPS technologies)
• Support the provision of cloud and platform security metrics, reports, risk insights, and service updates to IT and business stakeholders
• Work with Security Architects, Infrastructure, Application, and Project teams to strengthen security controls across Cloud platforms and digital services
• Contribute to the delivery of the Platform & Network Security roadmap in alignment with the Club’s cyber security strategy and Cloud adoption initiatives
• Support cloud security assessments, vulnerability remediation activities, security investigations, and the implementation of security improvement initiatives
• Undertake other duties assigned by Cyber Security Management
• Participate, contribute and help shape a diverse and inclusive culture with trust and respect. Play an active role in supporting cross-team, cross-division, and cross-department collaboration, and model collaborative behaviours

About You

• Minimum of 5 years' experience in Cloud Security Operations, Platform Security, Security Engineering Support, Infrastructure Security, DevSecOps Security, or related disciplines
• Strong experience supporting enterprise cloud security platforms and technologies within public cloud and/or hybrid environments
• Proven experience operating and maintaining cloud security controls, cloud-native technologies, container platforms, enterprise security solutions, and operational security services
• Strong understanding of cloud-native architectures and modern technology platforms to effectively support operational and security requirements
• Demonstrated experience supporting critical enterprise systems within a production operational environment
• Strong service- and customer focused approach to the service being delivered
• Excellent interpersonal, collaborative and communication skills
• Well-disciplined with exemplary professional competence and integrity
• Cloud and platform security technologies, including Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), container and Kubernetes security, cloud-native security services, identity and access management (IAM), vulnerability management, endpoint/server security (EDR/anti-malware), web application firewall (WAF), API security, DDoS protection, and network security technologies
• Infrastructure-as-Code (IaC) security concepts and technologies, including Terraform or equivalent platforms, sufficient to support, review, troubleshoot, and maintain cloud-hosted services.
• DevSecOps practices, including source control, CI/CD pipelines, secrets management, automation frameworks, and security integration concepts
• One or more major cloud platforms (e.g. AWS, Microsoft Azure, Tencent Cloud) and their native security capabilities
• Cloud security principles and frameworks, including Zero Trust, cloud governance, secure cloud architecture, workload protection, and security monitoring
• Industry-recognised certifications in cloud security or cyber security (e.g. CCSP, AZ-500, AWS Certified Security – Speciality, CISSP, CISM, or equivalent)

Apply Now!

We offer competitive salary and benefits packages, a dynamic working environment and development opportunities.

Add horsepower to your career today. Click the “Apply Now” button to create an account and submit your application.

Equal Opportunity and Inclusive Hiring

We are an equal opportunity employer and strive to create an inclusive workplace for all. Applicants from diverse backgrounds are welcomed to apply. If you have any special needs or require accommodations during the interview process, please e-mail us via careers@hkjc.org.hk. Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and job applicants relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.