Job Opening

Our client, a Financial Institution, is looking for high-caliber person to fill the position.

Report to the Senior Manager or Department/Division Head on matters related to technology compliance, cyber security, and information security
Establish, update, and maintain the unit’s policies, procedures, guidelines, and plans, particularly those related to regulatory, compliance, and law-enforcement matters
Participate in cyber or information security drills initiated by industry bodies or regulators
Assist the Head in liaising and communicating with designated authorities or regulators
Assist in arranging and/or handling incident reporting matters related to IT, cybersecurity, and system incidents
Keep abreast of the latest cyber security-related law-enforcement, regulatory, and/or industry requirements to facilitate the identification of potential enhancement areas
Communicate and work with other departments/divisions on cyber and information security controls and enhancement matters
Arrange and/or conduct computer-system security risk assessments, technical assessments, audits, and reporting according to the scope and requirements

University degree, preferably in information technology, information/cyber security, computer science, or a related discipline
Minimum 5 years of experience in information/cyber security or technology risk management. Candidates with less experience who meet the requirements may be considered for the deputy manager position
Good understanding of technology risk management and cyber security best practices, with broad knowledge of fintech, data privacy, and/or industry practices
Knowledge of ISO 27001, CSA STAR, the HKMA SPM, the CFI 2.0 framework, technology risk management, and cyber security-related guidelines
CISA, CISM, CDPSE, CRISC, CISSP, CEH, CCSP, CREST, and/or other cyber resilience-related certifications preferred
Team player with sound interpersonal and communication skills
Red/Blue Team knowledge and experience are an advantage
Good command of written and spoken English and Chinese

Search