Cybersecurity Risk & Governance Manager

Hong Kong Aircraft Engineering Company Limited; Bhubaneshwar; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Hong Kong Aircraft Engineering Company Limited is seeking a seasoned Information Security professional to lead security governance and risk programs from its India operations. You will review standards, drive risk assessments, and participate in incident response and training initiatives to protect critical aviation IT assets.

The role requires 6+ years in information security, CISSP/CISM/CISA/CRISC or equivalent, and strong knowledge of NIST/ITIL.

Qualifications

• 6+ years in information security, security operations, or security program management.
• Bachelor’s or master in Computer Science, Information Security, or related field.
• CISSP/CISM/CISA/CRISC or equivalent credentials; knowledge of NIST and ITIL.

Responsibilities

• Develop standards and practices for security governance and compliance.
• Review and enhance security standards, procedures and guidelines.
• Facilitate cybersecurity risk assessment with entities.
• Monitor and report IT risk mitigations with owners.
• Analyze threat intelligence and suggest controls improvements.
• Manage cybersecurity incidents and participate in drills.
• Deploy cybersecurity training programs to uplift awareness.

Skills

Security governance

Risk management

Incident response

Threat intelligence

English fluency

Education

Bachelor’s or master in CS/InfoSec

CISSP/CISM/CISA/CRISC or equivalent

Tools

NIST framework

ITIL

Job description

Select how often (in days) to receive an alert:

Company: Hong Kong Aircraft Engineering Company Limited

The HAECO Group is an independent global provider of high-quality MRO services. We offer a broad range of aviation products and services that enable our customers to operate their aircraft, engines and components safely and efficiently. Headquartered in Hong Kong since 1950, our global reach has extended as we have grown. We now have operations throughout the Asia-Pacific region, Americas and other parts of the world.

Based at Hong Kong International Airport (HKIA), HAECO Hong Kong offer a full range of services including airframe services, line services, component services, engine services, freighter conversions, technical training and AOG support.

Position Description

What You'll Do

• Develop appropriate standards and practices in relations to security governance & compliance.
• Review, maintain and enhance security standards, procedures and guidelines to ensure they are current and adequate.
• Facilitate cybersecurity risk assessment with Entities.
• Monitor and report effective IT risk mitigating controls with application and infrastructure owners.
• Analyse threat intelligence and recommend improvement on security controls for Entities to evaluate and implement
• Manage cybersecurity incidents and participate in the cybersecurity crisis drill in order to minimize the damage/loss due to cybersecurity attacks.
• Deploy cybersecurity training program to uplift business cybersecurity awareness.

What You'll Need

1. Functional and other Relevant Experience

• A minimum of 6 years of combined experience in information security, security operations, security program and project management.

2. Qualifications and other Relevant Knowledge

• Bachelor’s or master’s degree in Computer Science, Information Security or a related field or discipline.
• Certified CISSP, CISM, CISA, CRISC or other similar credentials
• Knowledge and understanding of NIST and ITIL.
• In-depth knowledge of information security risk management and cybersecurity technologies.
• Fluent in English, Mandarin is an advantage

HAECO Group is an equal opportunity employer. At HAECO, we are committed to creating an inclusive and supportive working environment for all our people regardless of their age, gender, gender identity, sexual orientation, relationship, family status, disability, race, ethnicity, nationality, religious or political beliefs. We believe in creating an environment where people feel comfortable at work and are able to realise their full potential.

Build your career with us and be part of something bigger at HAECO!

Reference ID: 1204

Candidates not contacted 4-6 weeks after submission of applications and/or interviews may consider their application unsuccessful.

All information provided by candidates will be treated in strict confidence and will be used for employment purpose only.