Lead, IT Security

Rise Associates Asia Limited; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Rise Associates Asia Limited seeks a seasoned Lead, IT Security to oversee IT security operations within a financial services environment. The role reports to the Head of IT and will supervise a small security team, with a focus on regulatory IT security requirements such as HKMA.

You will guide governance, controls, incident response, and risk reviews, while staying ahead of cyber threats and introducing effective security solutions across the organization.

Qualifications

• Degree or above in IT or related disciplines.
• Holder of recognized security certifications (e.g. CISSP, CISA, CISM, CEH, OSCP, CCSP).
• With 12+ years’ IT security experience, preferably in banking.
• Strong knowledge of ISO 27001 and other IT security standards.
• Able to create and maintain IT documentation (policies, guidelines, playbooks, workflows).
• Excellent communication and presentation skills in Chinese and English.

Responsibilities

• IT security operations oversight and governance.
• Develop and enforce security policies, controls, and workflows.
• Lead incident response and remediation actions.
• Evaluate cyber threats and landscape to introduce relevant solutions.
• Lead regular penetration testing and vulnerability management.
• Update management with security trends and recommendations.
• Collaborate with technology teams on new applications and risk reviews.

Skills

IT security operations

Governance & controls

Incident response

Cyber threat landscape

Penetration testing

Vulnerability management

Technical advisory

Education

Bachelor's degree in IT or related disciplines

CISSP / CISA / CISM / CEH / OSCP / CCSP certifications

Job description

Summary: Our client is a financial services organization at medium scale, and to cope with the needs for IT security operations and regulatory requirements, they are looking for a Lead, IT Security for the team. This role reports into the Head of IT and will supervisea small IT security team. The ideal candidate shouldpossesses solid banking industry experience,with practical IT security operations experience, and is familiar with regulatory IT security requirements (e.g. HKMA).

Responsibilities:

• IT security operations
• IT security governance & controls, compliance, policies & workflows
• Incident response and remediation actions
• Evaluation of latest cyber thread & technology landscape, to introduce relevant cybersecurity solutions to implement in the company
• Lead regular penetrationtesting and vulnerability management activities
• Keep management committeeudpated with latest securirty threads and provide associated advices/ recommendations
• Assisst with other technology members to evaluate newadoption of emerging technology (i.e. via throughout security reviews of new applications/ systems)

Requirements:

• Degree or above in IT or related disciplines
• Holder of recognized security certifications, e.g. CISSP, CISA, CISM, CEH, OSCP, CCSP
• With 12+ years’ IT security experience - With demonstrableexperience in banking industry
• Demonstrate strong knowledge of industry recognized IT security standards, i.e. ISO 27001
• Strong at creating and maintaining IT documentation, such as: policies, guideline, playbook, workflow, etc.
• Strong communication and presentation skills, with a logical personality
• Good command of spoken and written Chinese and English