Assist senior manager to formulate and manage information security policies, standards and procedures.
Plan and carry out various information security assurance activities, including computer accounts re-certification, safekeeping of electronic certificates, review the initiation of security configuration changes. Plan and conduct information security assessment and IT risk evaluation in area covering IT general controls, information asset management, access controls and endpoint security review, and third-party vendor information security & IT risk management.
Act as a subject matter expert to assist business units and cross-functional teams in identifying and mitigating information security risks and/or control gaps, and recommends remediation initiatives.
Create and manage information security awareness training programs for all employees, contractors, third-party vendor and approved system users.
Job Requirements:
Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.
Over 3 years of experience in IT security, technology risk, risk management, network and system management, compliance or IT audit function, gained from other sizable financial institutions.
Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CRISC is preferable.
Good command of written and spoken English and Mandarin is preferable. Good communication and interpersonal skills.
Flexibility in traveling (On request).
Candidate with less experience will be considered as Assistant Manager.