Client Security Manager

Atos; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Atos Hong Kong is seeking a Client Security Manager to lead information security governance, risk and compliance for assigned client accounts, ensuring contractual requirements are met and the environment remains audit-ready.

You will act as the single point of contact for security governance, coordinate with the client's GRC teams and Atos partners, and drive security incident management and remediation while communicating with CXOs.

Qualifications

• At least 5 years in risk management, audit, security or technical delivery.
• Experience in IT outsourcing or 5+ years in industry vertical.
• Excellent written and spoken English.

Responsibilities

• Act as the single point of contact for Security Governance, Risk and Compliance.
• Build and maintain a client relationship with the client's GRC & security organization.
• Represent Atos within the customer security governance forum.
• Run account security governance forum and ensure operational security.
• Develop and maintain client-specific account security plan.
• Manage and report security incidents.
• Participate in security audit hosting and remediation.
• Ensure knowledge and implementation of security fundamentals, policies and standards.
• Coordinate with partners delivering security services on behalf of Atos.
• Contribute to security services growth and upsell security services into account.

Skills

Security governance

Risk management

Executive communication

Education

CISSP

CISM

CRISC

Job description

The Client Security Manager (CSM) is a consulting and coordination role which is responsible for delivering the customer security related contractually agreed upon requirements.

To this end the CSM will support the Client Delivery Executive, providing leadership for Information Security, Governance, Risk and Compliance (incl. assurance) in adherence to both regulatory and contractual requirements.

As CSM you will be responsible for all security-related business controls of customer(s) assigned to you working closely with your global peers to deliver an always secure, audit ready environment.

Job Responsibilities

• Act as the single point of contact for Security Governance, Risk and Compliance
• Build and maintain a client relationship especially with the client's GRC & security organization (CISO) and staff
• Represent Atos within the customer security governance forum
• Run account security governance forum, ensure operational security
• Develop and maintain client-specific account security plan
• Manage (receive, assess) and report security incidents
• Participate in security audit hosting and audit remediation activity
• Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
• Leverage Atos global tooling (e.g. Alcatraz, ART, etc.) to advise management regarding the maintaining of the security, compliance & risk levels within required targets
• Coordinate with all partners delivering security services on behalf of Atos not limited to Data Protection Office, Business Service Line - Operational Security and Compliance Officer, Client Continuity Management, and other Atos Divisions
• Contribute to security services growth, upsell security services into account

Job Requirements

• At least 5 years' experience working in a risk management, audit, security or a technical delivery role
• Experience in IT outsourcing business or 5+ years in industry vertical
• Excellent written and spoken English
• Holder of CISSP certification, CISM or CRISC
• Must have an in-depth knowledge and a fully demonstrable and practical experience of the security standard ISO:27001
• Excellent and effective communication skills at all levels of management including verbal, written and presentation format
• Ability to lead effectively in diverse, multi-national and virtual environments
• Self-motivated with a positive can-do attitude
• Able to communicate with all levels of stakeholders, up to and including CXOs, within Atos, the Customer account team, suppliers and third parties, on a day-to-day basis. This communication will include face-to-face meetings, teleconferencing and presentations.