AVP, Data Security Specialist, Business Operations

The Role

AVP, Data Security Specialist, Business Operations

Key Accountabilities

• Play role as subject matter expert in Data Security and 2nd line of defense in Data Security Risk Management;
• Establish data security and data security risk management framework and mechanism and develop, implement, and maintain relevant policies and procedures. Ensure compliance with local and international regulations and standards, as well as Head Office's requirements in data security and data security risk management;
• Protect sensitive and classified data according to regulatory requirements and Head Office standard/framework;
• Prepare risk assessments and vulnerability analyses to identify potential threats to data security;
• Conduct data classification and implement measures to minimize and mitigate data security risk;
• Manage data security incidents, breaches and compliance violations. Responsible to design and implement remedial actions in case of events happened;
• Collaborate with RMD, IT, business and other stakeholders regionally to ensure data security and data security risk management policies and procedures are implemented;
• Lead training and awareness programs to educate employee ondata security best practices.

Skills & Experience

• Bachelor degree in information Security, Risk management, Computer Science or a related field;
• Minimum of 7 years of experience in data and 5 years of experience in data security, risk management or related roles, preferably in the banking or financial services industry;
• Candidates with over 2 years of full time working experience in Hong Kong or overseas is considered as an advantage;
• Strong in data security and deep understanding of data security risk management;
• Proven experience in establishing data security risk management framework and data security policies and implement data security related measures;
• Problem solving leader with excellent communication skills and leadership ability to formulate and remediate the resolution from complex environment;
• Hold certifications such as CISSP, CISM, CISA, CCIP/A, CIPP/E,CIPM,CIPT are preferred;
• Proficient in Chinese and English, preferable fluent in Putonghua.

Other Information

• Please apply in strict confidence with full resume, academic record, current and expected salaries;
• The personal data provided will be used for consideration of recruitment only. All personal data of unsuccessful candidate will be destroyed within 24 months;
• Candidates with Enhanced Competency Framework (ECF): please state on the CV.

About BOCI

As a leading investment bank in China and Hong Kong region, the investment banking arm of Bank of China, BOC International Holdings Limited (“BOCI”), is now seeking highly motivated, creative and success-oriented professional who would like to pursue the career for supporting our group.