Head of Cybersecurity, Investment bank

Key Areas of Responsibilities

1.  Revise CSI’s cyber security and data security framework, policies, standards, and procedures for cybersecurity and data handling
2.  Establish, implement, and enforce a comprehensive governance framework that aligns with CSI’s policies defining data management, data lifecycle, data protection and data leakage protection
3.  Ensure CSI’s infrastructure, systems and applications adhere to laws, regulations and best industry standards (e.g., GDPR, MAS, ISO 27001, NIST, Data Protection laws in China)
4.  Maintain audit readiness and respond to compliance assessments, audit inquiries, client questionnaires, and regulator’s requests
5.  Identify, assess, and prioritize cyber risks to the organization. Build an effective cybersecurity and data management framework and deploy it
6.  Establish governance to CSI’ vulnerability management program with Application and Platform teams
7.  Provide regular reports and dashboards on cybersecurity governance and compliance status
8.  Ensure full compliance to all company policies, required training and regulatory requirements
9.  Establish a cloud governance framework to manage CSI’s multi cloud strategy involving AWS, Azure, and Alibaba Cloud
10.  Assist to manage IT security portfolio at CSI

Requirements

1.  Bachelor’s degree or above in computer science, engineering or related domain discipline
2.  Minimum 15 years of relevant experience in IT, cyber, and data security
3.  Ability in manage IT projects and stakeholders of IT projects
4.  understanding of / Demonstrating familiarity with Cyber Security topics – Firewalls, WAF, Application security, Cloud security, web gateway, endpoint protection, SIEM, threat hunting, identity access management, application whitelisting, O365, data leakage protection, network security, email security, etc.
5.  Strong interpersonal / organizational / problem-solving / project management / client serving / multi-tasking skills
6.  Able to work independently / attention to details / result-driven/ self-motivated / self-starter / proactive mindset / enthusiastic/ a team player
7.  Strong leadership skills
8.  Able to drive projects involving multiple teams and knowledge domains
9.  Excellent command of / fluent in both spoken and written (English and Chinese (Putonghua is a must))
10.  Certification – Highly desirable — CISSP, CISM, CISP, ISO 27001 Lead Implementer/Auditor