Cybersecurity Governance Lead, ISO 27001 (Banking)

China Construction Bank (Asia) Corporation Limited; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

China Construction Bank (Asia) Corporation Limited is seeking a senior Cyber Security professional to design, implement, and oversee the cybersecurity management system in Hong Kong. The role focuses on governance, policy development, and incident response to protect regional and cross-border banking operations.

The ideal candidate has 5+ years in cyber security within finance, HKMA ECF-C certification, and strong Mandarin communication skills.

Qualifications

• Degree in Cyber Security, Computer Science or Information Technology or related discipline.
• 5+ years in Cyber Security Management/ Operations/ Technology Risk or IT Audit; banking/finance experience preferred.
• HKMA ECF-C professional level certification is required.
• Strong communication, presentation and problem-solving skills.
• Mandarin language skills (written and spoken) are a must.

Responsibilities

• Design, implement, operate, improve, and report the cybersecurity management system per ISO/IEC 27001.
• Establish the cybersecurity governance model and define key roles and responsibilities.
• Support the development and maintenance of cybersecurity objectives, strategy, and program.
• Develop and maintain cybersecurity policies, procedures, standards, and guidelines.
• Monitor and evaluate the effectiveness of cybersecurity controls.
• Engage with external stakeholders as the Cyber Security Management Team point of contact.
• Establish and maintain the cybersecurity awareness program.
• Assist in maintaining ISO/IEC 27001 certification.
• Participate in regional assessment teams across Asia to guide remediation.
• Perform other duties as assigned by Head of Cyber Security and IT Governance.

Skills

Threat intelligence management

Security incident management

Application security

Mandarin proficiency

Cross-border compliance

Education

Cyber Security

Computer Science

Information Technology

Job description

China Construction Bank (Asia) Corporation Limited is seeking a senior Cyber Security professional to design, implement, and oversee the cybersecurity management system in Hong Kong. The role focuses on governance, policy development, and incident response to protect regional and cross-border banking operations.

The ideal candidate has 5+ years in cyber security within finance, HKMA ECF-C certification, and strong Mandarin communication skills.