IT Security Leader: Strategy, Risk & Compliance

Chubb External; Hong Kong; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

Chubb External is seeking an IT security leader to drive and maintain security programs across applications, infrastructure and IT processes. The role focuses on defining strategy, coordinating security projects, and ensuring compliance with policies and regulatory guidelines.

The position requires overseeing vulnerability management, security controls, and incident response while supporting business growth and continuity planning.

Responsibilities

• Lead the security officer role, help define and maintain security strategy and direction of all application and infrastructure and IT process.
• Lead IT security projects in building up and maintaining a secure IT environment to support business development and establishing corresponding security control process/procedures.
• Manage and coordinate application enhancements with application teams for security remediations.
• Provide advice for localization of security implementations that meet local business and technology requirements.
• Evaluates the feasibility of new security technology for business use and provides advice for the acquisition of new security technology.
• Manage IT Security Policy, Procedure, Standard and Process (GISP Annual Review, Coordination etc.).
• Responsible to security issue and vulnerability management (scanning, identification, notification etc.).
• Responsible to implement company’s security standards and assist in managing the change management and segregation of duties.
• Provides support in BCP/DRP.

Job description

Chubb External is seeking an IT security leader to drive and maintain security programs across applications, infrastructure and IT processes. The role focuses on defining strategy, coordinating security projects, and ensuring compliance with policies and regulatory guidelines.

The position requires overseeing vulnerability management, security controls, and incident response while supporting business growth and continuity planning.