IT Security and Risk Officer - Insurance, 25k

Michael Page; Hong Kong; Presencial; HKD 420 000 - 540 000; Tempo integral

Resumo da oferta

Michael Page is recruiting a Security Risk Coordinator in Hong Kong for a leading insurance company. The role focuses on vendor security assessments, risk reviews, and security assurance activities to evaluate risks and ensure control effectiveness.

You will review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence, identifying gaps and remediation needs. Strong communication across stakeholders is essential in English and Cantonese.

Qualificações

• Degree or Diploma in Information Security, Cybersecurity, Computer Science, Information Systems, Technology Risk, or a related discipline.
• 2-4 years of experience in Information Security, Technology Risk, IT Audit, Security Governance, Risk & Compliance, or Third-Party Risk Management.
• Experience reviewing security controls, questionnaires, and supporting evidence is preferred.
• Good understanding of information security principles, technology risks, and security control frameworks.
• Exposure to third-party/vendor risk, cloud security, AI security, application security, outsourcing, or operational resilience is advantageous.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Effective stakeholder management and communication skills, with the ability to work across business, technical, and vendor teams.
• Excellent written and verbal communication skills in English and Cantonese.
• Well-organized with the ability to manage multiple assessments and priorities simultaneously.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 are desirable but not required.

Responsabilidades

• Conduct vendor security assessments and assurance reviews to evaluate security risks and control effectiveness.
• Review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence to assess control adequacy.
• Identify security gaps, control weaknesses, exceptions, and residual risks, and support remediation planning and tracking.
• Coordinate with business stakeholders, technical teams, and vendors to gather information and resolve assessment queries.
• Track and follow up on security findings, risks, and remediation actions through to closure.
• Maintain accurate assessment records, risk registers, action plans, and supporting documentation for audit and compliance purposes.
• Support ongoing monitoring and periodic reviews of third-party vendors based on risk profile and criticality.
• Prepare risk summaries, assessment reports, management updates, and stakeholder communications.
• Contribute to the continuous improvement of security assessment methodologies, processes, templates, and governance frameworks.

Conhecimentos

Analytical thinking

Stakeholder management

Communication (EN/Cantonese)

Documentation & record-keeping

Formação académica

Degree or Diploma in Information Security, Cybersecurity, Computer Science, Information Systems, Technology Risk, or related discipline

Ferramentas

CISA

CISM

CRISC

CISSP

ISO 27001

Descrição da oferta de emprego

• Vendor security assessments, risk reviews, and security assurance activities
• Insurance

• Vendor security assessments, risk reviews, and security assurance activities
• Insurance

About Our Client

My client is one of the insurance companies in Hong Kong.

Job Description

As a Security Risk Coordinator, your main responsibilities will include:

• Conduct vendor security assessments and assurance reviews to evaluate security risks and control effectiveness.
• Review security questionnaires, policies, procedures, certifications, audit reports, and supporting evidence to assess control adequacy.
• Identify security gaps, control weaknesses, exceptions, and residual risks, and support remediation planning and tracking.
• Coordinate with business stakeholders, technical teams, and vendors to gather information and resolve assessment queries.
• Track and follow up on security findings, risks, and remediation actions through to closure.
• Maintain accurate assessment records, risk registers, action plans, and supporting documentation for audit and compliance purposes.
• Support ongoing monitoring and periodic reviews of third-party vendors based on risk profile and criticality.
• Prepare risk summaries, assessment reports, management updates, and stakeholder communications.
• Contribute to the continuous improvement of security assessment methodologies, processes, templates, and governance frameworks.

The Successful Applicant

A Successful Security Risk Coordinator Should Have

• Degree or Diploma in Information Security, Cybersecurity, Computer Science, Information Systems, Technology Risk, or a related discipline.
• 2-4 years of experience in Information Security, Technology Risk, IT Audit, Security Governance, Risk & Compliance, or Third-Party Risk Management.
• Experience reviewing security controls, questionnaires, and supporting evidence is preferred.
• Good understanding of information security principles, technology risks, and security control frameworks.
• Exposure to areas such as third-party/vendor risk, cloud security, AI security, application security, outsourcing, or operational resilience is advantageous.
• Strong analytical and problem-solving skills with excellent attention to detail.
• Effective stakeholder management and communication skills, with the ability to work across business, technical, and vendor teams.
• Excellent written and verbal communication skills in English and Cantonese.
• Well-organized with the ability to manage multiple assessments and priorities simultaneously.
• Professional certifications such as CISA, CISM, CRISC, CISSP, or ISO 27001 are desirable but not required.

Quote job ref: JN-102026-7134392