IT Security Governance Officer

Our client is looking for a IT Security Officer to support its regional infromation security and risk governance.

Robert Walters is a global, specialist professional recruitment consultancy.

Established in 1985 in London, the business has grown and so has our ambition. We now operate across 31 countries and employ over 4,000 people. It's a powerful success story built on the strength of our people. Organisations rely on us to find high-quality professionals for a range of specialist roles. Professionals who are looking for a new role, whether it's on a permanent, interim or contract basis, trust us to find them their ideal job.
Our core recruitment disciplines are:

· Accountancy & Finance
· Construction, Property & Engineering
· Financial Services
· Healthcare
· HR
· Legal & Compliance
· Sales & Marketing
· Secretarial & Business Support
· Supply Chain, Logistics & Procurement
· Tech & Transformation

For more information about Robert Walters Hong Kong, please visit www.robertwalters.com.hk

Responsibilities

Assist in the development of the Group Information Security policies, standards, and procedures.
Support the on-going maintenance and review of the policies and procedures according to the industry best practices and standards (e.g. ISF, ISO 27001, PCI-DSS), technologies, relevant regulatory and group requirements
Support IT Security manager to drive and align the policy compliance across the group and the regional business units
Perform and manage regular Information Security and Control assessment to ensure that business units are compliant with the Group Information Security Policies and Standards
Coordinate audit findings remediation to mitigate the risks
Identify and address cyber risks and requirements in order to protect the organisation from adversity, surprise and weakness
Monitor Information Security and Risk control, and test to determine the control performance and effectiveness
Support the Cyber Security project implementation and daily activities with respect to Information Security best practices and risk assessments
Responsible to support Regional Information Security and Risk Governance for the Asia countries to ensure the Security posture of business units are properly measured, monitored and managed

Requirements

At least 3 years hands-on experience in IT Security, Governance and Risk Management
Strong knowledge and understanding of Information Security framework, such as ISF, ISO27001
Sound knowledge of Information System, IT Operation and IT Audit
Good stakeholder engagement and management skills
Great sense of ownership and servicing mindset
Strong liaison skill, teamwork, passion and commitment mentality
Self-motivated, with good interpersonal and analytical skills, communicate effectively to stakeholders on risk management and cyber security governance
Strong problem solving and project execution skills; able to handle changing priorities and drive difficult decisions; highly dependable team player with ongoing commitment to excellence
Relevant professional certification, such as CISA, CISM, CRISC or CGEIT is desired