Client Security Manager

Atos; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Atos Hong Kong seeks a Client Security Manager to lead security governance, risk and compliance for assigned client accounts, ensuring audit readiness and contractual compliance. You will guide delivery teams and coordinate with global peers to maintain a secure environment.

The role requires CISSP/CISM/CRISC certifications, strong communication, and the ability to operate across multi-national teams, CXO level, and external partners.

Qualifications

• At least 5 years in risk management, audit, security or technical delivery roles.
• Experience in IT outsourcing or 5+ years in industry vertical.
• Excellent written and spoken English.
• Demonstrable knowledge of ISO 27001 and security controls.

Responsibilities

• Act as the single point of contact for Security Governance, Risk and Compliance
• Build and maintain a client relationship especially with the client’s GRC & security organization (CISO) and staff
• Represent Atos within the customer security governance forum
• Run account security governance forum, ensure operational security
• Develop and maintain client-specific account security plan
• Manage (receive, assess) and report security incidents
• Participate in security audit hosting and audit remediation activity
• Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
• Leverage Atos global tooling (e.g. Alcatraz, ART, etc.) to advise management regarding the maintaining of the security, compliance & risk levels within required targets
• Coordinate with all partners delivering security services on behalf of Atos not limited to Data Protection Office, Business Service Line - Operational Security and Compliance Officer, Client Continuity Management, and other Atos Divisions
• Contribute to security services growth, upsell security services into account

Skills

Security governance

Risk management

Audits

Stakeholder communication

Education

CISSP Certification

CISM Certification

CRISC Certification

ISO 27001 knowledge

Tools

Alcatraz

ART

Job description

The Client Security Manager (CSM) is a consulting and coordination role which is responsible for delivering the customer security related contractually agreed upon requirements.

To this end the CSM will support the Client Delivery Executive, providing leadership for Information Security, Governance, Risk and Compliance (incl. assurance) in adherence to both regulatory and contractual requirements.

As CSM you will be responsible for all security-related business controls of customer(s) assigned to you working closely with your global peers to deliver an always secure, audit ready environment.

Job Responsibilities

• Act as the single point of contact for Security Governance, Risk and Compliance
• Build and maintain a client relationship especially with the client’s GRC & security organization (CISO) and staff
• Represent Atos within the customer security governance forum
• Run account security governance forum, ensure operational security
• Develop and maintain client-specific account security plan
• Manage (receive, assess) and report security incidents
• Participate in security audit hosting and audit remediation activity
• Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
• Leverage Atos global tooling (e.g. Alcatraz, ART, etc.) to advise management regarding the maintaining of the security, compliance & risk levels within required targets
• Coordinate with all partners delivering security services on behalf of Atos not limited to Data Protection Office, Business Service Line - Operational Security and Compliance Officer, Client Continuity Management, and other Atos Divisions
• Contribute to security services growth, upsell security services into account

Job Requirements

• At least 5 years’ experience working in a risk management, audit, security or a technical delivery role
• Experience in IT outsourcing business or 5+ years in industry vertical
• Excellent written and spoken English
• Holder of CISSP certification, CISM or CRISC
• Must have an in-depth knowledge and a fully demonstrable and practical experience of the security standard ISO:27001
• Excellent and effective communication skills at all levels of management including verbal, written and presentation format
• Ability to lead effectively in diverse, multi-national and virtual environments
• Self-motivated with a positive can-do attitude
• Able to communicate with all levels of stakeholders, up to and including CXOs, within Atos, the Customer account team, suppliers and third parties, on a day-to-day basis. This communication will include face-to-face meetings, teleconferencing and presentations.