Information Security and Technology Risk Assistant Manager (Ref. No.: 27474)

Our client, a Statutory Body, is looking for an Information Security and Technology Risk Assistant Manager.

Assist in developing and formulating the monitoring framework and mechanism in respect of information security, covering physical data / information security and cybersecurity, and technology risk management for the operation of the Platform by a third-party delivery partner
Assist in overseeing and managing the Delivery Partner’s performance and delivery of information security and technology risk related initiatives, including but not limited to the development of reporting metric (such as performance indicators and risk indicators), incidents and risk register for identifying, recording and monitoring potential risks, and ensuring proper follow-up on the risks identified through appropriate rectifications, remedial actions and / or mitigation measures;
Assist in implementing, enforcing, monitoring and continuously enhancing supervisory framework, policies and procedures governing information security and technology risk management in support of the operation of the Platform;
Assist in performing regular assessment on information security and technology risk to ensure compliance with the relevant policies, laws and regulations;
Provide support for regular and ad hoc reporting to the management of the Company on work progress and potential issues.

Degree holder in Computer Science / Information Security or related disciplines;
Around 5 to 7 years of relevant experience in related fields e.g. technology risk, information security, cyber security and regulatory compliance;
Relevant technology management and/or IT audit qualifications e.g. CISM, CISSP, CISA, CRISC or equivalent;
Good knowledge on information security and technology risk management principles and best practices;
Knowledge of the relevant personal data privacy laws and regulations (e.g. the PDPO) is preferred;
Knowledge of security in infrastructure and applications;
Proactive, responsible, good problem solving, communication and interpersonal skills, and a good team player with analytical thinking;
Good command of written and spoken English and Chinese; and
Mature, detail-minded and able to work under pressure.