(Senior) Manager - Technology Risk/ Cyber Risk

My reputable client with a well established technology risk team is rapidly expanding to fulfil their business expansion. If you are keen to know more, please get in touch!

About the job:

• Develop a new Information Technology Risk Management Framework that is in line with international best practice such as ISO27001, NIST Cyber Security Framework, Centre for Internet Security (CIS) and/or COBIT5 and is interoperable within the company's Enterprise Risk Management Framework.

• Implement the new IT Risk Management Framework including the Organisational Design, Technology and Processes required that are both feasible and suitable for the company.

• Identify top technology risks for the company and monitor changes in their risk posture based on KRIs, Control Assurance Assessment results, audit issues and/or technology incidents.

• Develop an IT control library for the company that is in line with international best practice and design a Control Assurance Program to test the design and operating effectiveness of controls on a regular basis.

• Support the implementation of Technology and Cyber Security governance including technology and security frameworks, policies, and standards including relevant regulatory frameworks (eg PCI-DSS, China CyberLaw).

About the requirements:

• Degree qualification in Engineering, Computer Science or relevant disciplines.
• Minimum 5+ years of work experience in information security, technology and risk management with consideration years of work experience in Technology Risk 2nd line of defence, IT General Controls, IT compliance and info sec best practices e.g. NIST, COBIT, etc.
• Strong presentation skill to broad audience and senior management.
• Able to support large scale IT Risk programme and maintain the highest standards of conduct and integrity and ensure compliance with accepted industry practices, company policies, regulatory requirement e.g. GDPR, PII, etc