IT Risk & Cybersecurity Strategy Lead

eFinancialCareers Ltd.; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

HKMC Annuity Limited is seeking an experienced Information Security professional to govern cybersecurity risk matters, provide advisories for IT solutions, and oversee regulatory compliance across systems in Hong Kong. You will conduct cloud risk assessments, maintain risk registers, and collaborate with experts on assessments and incidents.

The role requires 8+ years in information security or risk disciplines, familiarity with insurance/financial IT regulations, and relevant certifications.

Qualifications

• Degree or equivalent in Information Security, Computer Science, or related field.
• 8+ years of experience in information security or risk management.
• Familiar with insurance/financial services IT regulatory requirements.
• Strong cloud security and application security knowledge.

Responsibilities

• Govern cybersecurity risk matters for governance and board presentation.
• Provide security advisories and recommendations for IT solutions.
• Oversee implementation of new cybersecurity regulations and controls.
• Conduct security and cloud risk assessments to identify threats and mitigations.
• Maintain security risk register and communicate risks to stakeholders.
• Collaborate with SMEs on assessments, testing, and threat intel simulations.
• Manage IT security incidents and provide timely advisories.
• Review/update security policies and control processes; perform ad hoc duties.

Skills

Information security leadership

Cloud security

Application security

Risk management

Regulatory compliance

Security governance

Penetration testing

Threat intelligence

Education

Bachelor's degree in Information Security or related

Master's degree preferred

Tools

CISSP

CISA

OSCP

CEH

ISO 27001

NIST

Job description

HKMC Annuity Limited is seeking an experienced Information Security professional to govern cybersecurity risk matters, provide advisories for IT solutions, and oversee regulatory compliance across systems in Hong Kong. You will conduct cloud risk assessments, maintain risk registers, and collaborate with experts on assessments and incidents.

The role requires 8+ years in information security or risk disciplines, familiarity with insurance/financial IT regulations, and relevant certifications.