Director of Response, Hong Kong

About Blackpanda
Blackpanda is Asia's leading cyber incident response company, delivering digital emergency response across three integrated channels: IR consulting, IR-1 assurance subscriptions, and Lloyd's of London-underwritten cyber insurance. Each is purpose-built for a different buyer, whether enterprise, mass market, or sophisticated risk-transfer clients, and each stands alone as full incident response. Together, these channels reach the entire commercial market, because our mission is to provide digital emergency response for everyone. Buy all three and they combine into the complete post-attack recovery solution: preparation in advance, response the moment you're hit, and financial recovery paid for by insurance. One local team to help you get ready, respond, and recover.
How We Work
Blackpanda is a tech-enabled services team. We invest heavily in AI and are constantly pushing to do better, faster, and at scale. You are given freedom to use the approved tools in the team, but you are to take ownership of outcomes. We prefer smart work over hard work, welcome good ideas regardless of where they come from, and have deliberately kept red tape out of the way of innovation. If you want to join a team building the best response practice in Asia — and shaping the tools and methods that get us there — you'll be in good company.
Your Mission: Director of Response, Hong Kong
Reporting to the Executive Director of Response, the Director of Response leads Blackpanda's Cyber Incident Response practice in Hong Kong — growing the local team, owning client relationships, and serving as our senior technical authority on the ground.
This is a leadership role for an operator who has lived through real incidents and can bring clarity, calm, and direction when organisations are at their most exposed. You will still take the lead on select engagements where your seniority is required, but your primary job is to scope work, guide consultants, grow the bench, and represent Blackpanda in the Hong Kong market — in lockstep with the wider global team.
Compensation
Base Salary: HKD 1,200,000 per annum
Equity: ESOP grant with a value equal to 35% of base salary (HKD 420,000), priced at the company's current valuation
Core Responsibilities
Local Leadership and Team Development
Grow and retain the Hong Kong response team — hiring, developing, and building a bench capable of handling the full spectrum of incidents in the local market.
Mentor consultants in DFIR tradecraft, client communication, and operational discipline; guide them through investigations without taking the keyboard.
Own the well-being, performance, and progression of the local team, ensuring sustainable workloads in a high-pressure practice.
Partner with peers in the wider global team to share intelligence, align methodology, and ensure consistent quality across regions.
Client Advisory and Engagement Leadership
Act as senior technical advisor on active incidents — guiding clients through containment, eradication, recovery, and post-incident strategy.
Advise executives on risk, regulatory exposure, and strategic options as they work to emerge from a difficult situation.
Lead scoping conversations on new engagements, translating client needs into clear response plans and accurate proposals.
Maintain trusted relationships with clients, legal counsel, insurers, regulators, and law enforcement throughout the incident lifecycle.
Delivery Oversight and Selective Hands-On Work
Own delivery quality across Hong Kong engagements, reviewing findings, reports, and client deliverables before they go out.
Step into delivery on the most complex, sensitive, or high-profile matters that require senior judgment.
Guide investigations across Windows, Linux, macOS, and cloud environments, drawing on EDR, SIEM, network, and forensic data.
Regulatory Awareness and Threat Landscape
Maintain a current view of the Hong Kong and broader APAC regulatory environment, including expectations from the PCPD, HKMA, and SFC, as well as the Protection of Critical Infrastructures (Computer Systems) Ordinance.
Track active threat actors, ransomware groups, and sector-specific risks, and translate that context into practical guidance for clients.
Act as the local authority during regulatory conversations and notifications, ensuring clients are well-positioned and well-represented.
External Presence, Brand, and Cross-Functional Collaboration
Represent Blackpanda at conferences, industry events, and roundtables in Hong Kong and the region to support marketing, brand, and pipeline.
Build a strong personal and firm reputation across the local cyber community through speaking, publishing, and thought leadership.
Partner with sales and the global response leadership team — providing technical insight in pre-sales and helping position Blackpanda's capabilities with precision.
Minimum Requirements
8+ years of hands-on experience in cyber incident response, digital forensics, or threat intelligence, including substantial time in a client-facing consulting environment.
3+ years leading or managing a response, DFIR, or security consulting team, with demonstrated ownership of hiring, mentoring, and performance.
Track record of leading complex, high-stakes incidents end-to-end — ransomware, BEC, nation-state intrusions, data exposure — including direct engagement with executives, legal, regulators, and insurers.

Employment type
Full-Time

Work arrangement
No