Information Security Officer - Banking Risk & Compliance

Randstad Hong Kong Limited; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Randstad Hong Kong Limited in Hong Kong is seeking a seasoned information security professional to support a leading banking client. You will review and maintain information security and data privacy policies, aligning with group standards and regional mandates to ensure regulatory compliance.

You will coordinate with local business units, IT, Compliance and Head Office Group Information Security, and perform risk assessments (RCSA/TPRA) while supporting audit remediation and BCM oversight

Qualifications

• Minimum 3 years of dedicated information security or IS audit experience in financial institutions.
• Bachelor's or master's degree in CS/IT/Engineering.
• Strong knowledge of HKMA, CBIRC, HK PDPO and international security standards.

Responsibilities

• Review, implement, and maintain information security and data privacy policies, procedures, and baselines.
• Ensure compliance with HKMA guidelines (TM-G-1, TM-G-2, SA-2, BYOD), HK PDPO, and CBIRC data protection regulations.
• Coordinate between local business units, IT, Compliance and Head Office Group Information Security.
• Conduct Technology Risk Assessments, RCSA, and TPRA.
• Track and drive remediation for audit, security, and BCM findings across APAC.

Skills

InfoSec

Risk assessment

Policy development

Regulatory compliance

Audit coordination

Stakeholder communication

Education

Bachelor's or Master's in CS/IT/Engineering

Tools

ISO 27001

NIST

Job description

Randstad Hong Kong Limited in Hong Kong is seeking a seasoned information security professional to support a leading banking client. You will review and maintain information security and data privacy policies, aligning with group standards and regional mandates to ensure regulatory compliance.

You will coordinate with local business units, IT, Compliance and Head Office Group Information Security, and perform risk assessments (RCSA/TPRA) while supporting audit remediation and BCM oversight