Senior Manager/ Head of Technology Risk (Cybersecurity)

My reputable, HK listed client is looking to hire a 1.5LoD expert to join their team. If you are keen to know more, please get in touch!

About the responsibilities:

• Formulate and manage information security policies, standards and procedures.
• Formulate, review and update risk management framework and supporting policies and guidelines which incorporate applicable Group standards, industry practices, and regulatory requirements.
• Plan and conduct information security assessment in area covering IT general controls, information asset management, access controls and endpoint security review.
• Support the implementation of security initiatives to ensure the compliance with corporate information security policies and compliance standards.
• Develop and maintain an Information Security dashboard and metrics that provide an accurate representation of the information security risk profile and relevant cyber threats.
• Ensure Information and Cyber Security risks are logged, identified and reported regularly to Information Security Committee and Group Technology Risk Management.
• Track, monitor and verify remediation and/or control implementation

About the requirements:

• Bachelor’s degree (or equivalent) in information technology or related disciplines
• CGEIT, CRISC, CISA and/or CISSP is preferred
• 8 years of experience in Technology 1.5 Line at a large multinational financial institution
• 5+ years of experience in technology risk & control including but not limited to:
• policies and standards, risk and control assessments, access controls,
• review program creation, control remediation, regulatory compliance,
• technology resiliency, risk and control governance and metrics, incident management,
• cloud computing, development lifecycles, vulnerability management and data protection
• Good knowledge of NIST Cybersecurity Framework, ITIL, CMMI, ITSM, COBIT, and PMBOK