Technology Risk Manager (IT Security) – Information Technology Department

Chiyu Banking Corporation Limited; Hong Kong; Vor Ort; HKD 446.000 - 781.000; Vollzeit

Zusammenfassung

Chiyu Banking Corporation Limited is seeking an Information Security professional to participate in design, development and implementation of security projects in Hong Kong. The role includes planning risk management strategies and developing security policies and procedures.

The ideal candidate has 3+ years in IT security, familiarity with regulators and auditors, and holds HKMA ECF certifications (CISA/CISSP/CISM/CCSP) with strong English and Mandarin skills.

Qualifikationen

• Degree in Computer Science or related discipline.
• HKIB banking qualifications preferred (ECF/CB).
• 3+ years in IT security, risk management, or related.
• Experience with regulators and external auditors.
• HKMA ECF qualifications (CISA/CISSP/CISM/CCSP) preferred.
• Good English and Mandarin conversation advantageous.
• Independent with initiative in information security.

Aufgaben

• Participate in Information and Cyber Security projects for the Design, development and implementation.
• Assist in planning technology related risk management strategies, processes and work plans.
• Formulate and manage information security policies, standards and procedures.
• Plan and conduct information security assessment and IT risk evaluation across IT general controls, asset management, access controls and security reviews.
• Assist business units in identifying and mitigating information security risks.
• Communicate risk issues and remediation recommendations to stakeholders.
• Create and manage information security awareness training for all employees, contractors and approved system users.

Kenntnisse

IT security

Risk management

Policy & standards

Stakeholder communication

Regulatory compliance

Ausbildung

Degree in Computer Science or related

Jobbeschreibung

Responsibilities:

• Participate in Information and Cyber Security projects for the Design, development and implementation.
• Assist in planning of technology related risk management strategies, processes and work plans.
• Formulate and manage information security policies, standards and procedures.
• Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and security review.
• Assist business units and cross-functional teams in identifying and mitigating information security risks.
• Communicate to business units and cross-functional teams regarding information security risk issues and/or control gaps, and recommends remediation initiatives.
• Create and manage information security awareness training programs for all employees, contractors and approved system users.

Requirements:

• Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.
• HKIB banking professional qualifications such as Enhanced Competency Framework (ECF) and/or Certified Banker (CB) preferred.
• Over 3 years of experience in IT security, technology risk, risk management, system development management.
• Demonstrated experience working with the regulators and external auditor.
• Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CISM, CCSP is preferable.
• Good command of written and spoken English and Mandarin is preferable.
• Independent, strong self-initiative and with passion in information security and cyber security professional.

We offer competitive packages and promising career opportunities to the right candidates.

Information provided will be treated in strict confidence and only be used for recruitment purposes. All personal data of unsuccessful applicants will be destroyed after the recruitment exercise. A copy of Personal Information Collection Statement is available upon request.