Information Security Manager/ Tech Risk (APAC)

A few of my reputable clients are looking to hire tech risk/ enterprise risk/ information risk experts to join their teams, at senior specialist to manager grade. If you are keen to know more, please get in touch!

About the responsibilities:

• Developing, implementing and maintaining a information & cyber security program that includes processes, policies, procedures, risk assessments, controls, awareness and training plans.
• Identifying and implementing tools and processes to effectively collect and monitor information security metrics, implements quality dashboards, KPI reports and SLA with vendors.
• Acting as a liaison with the Information Risk Security Officers across business units to ensure global alignment.
• Overseeing the implementation of its information security standards and ISAE3402 compliant security controls.
• Providing information & cyber security guidance and training to all Asia departments and employees.
• Quality Assurance
• Identifying and implementing tools to enhance the quality of process and control design and to effectively collect and monitor performance metrics, implement quality dashboards and KPI reports.
• Conducting quality-control tests and analyses to ensure that IT processes meet or exceed specified standards and end-user requirements.

About the requirements:

• Bachelor's Degree and 5+ years of related experience in a financial institution.
• Certifications in one or more of the following: CISA, CISSP, CISM, CRISC, CSX-P and/or CCSP
• Familiar with NIST/ COBIT IT Governance Framework or ISAE3402 Control Framework.
• Good written and spoken English with strong communication skills