Senior Analyst IT Security and Assurance

• Work
  extensively with Internal / External Audit and Risk Management on IT audit,
  risk and compliance assessment
  
• Engage
  with all levels of IT staffs to gather information for audit and assessment
  
• Tracked
  the remediation status of audit and assessment observation and recommendation and
  prepare management reports
  
• Work
  with Group IT Security and Information Risk Management to perform risk
  assessment
  
• Involve
  in new systems and projects under development as an independent advisor to IT teams
  and business to ensure security requirements are embedded into BAU processes and
  IT projects
  
• Develop
  and regularly review policies and procedures regarding IT Security
  
• Perform
  risk assessment and trend analysis to ensure that IT risks are identified,
  measured,
  
• recorded
  and reported, monitored, and re-mediated timely and within the Company’s risk appetite
  
• Prepare
  materials communicating IT security messages and supporting management reporting
  on security and technology performance
  
• Promote
  IT security awareness and conduct regular training for staff
  
  

Requirements

• Degree
  in Computer Studies, or related disciplines
  
• Relevant
  professional qualifications (e.g. CISA, CISM, and CISSP)
  
• At
  least 3 years of relevant working experience, preferably in banking / insurance
  industry
  
• Strong
  control mindset on cyber and technology risk matters
  
• Able
  to articulate IT risk in relation to the business
  
• Ability
  to identify and assess complex IT risks and controls
  
• Capable
  of providing effective challenge and advice while maintaining strong,
  respectful relationships with various parties
  
• Familiar
  with relevant regulatory requirements on technology risk management and cybersecurity
  relating to Bermuda Monetary Authority (BMA), Insurance Authority (IA), Securities
  and Futures Commission (SFC) and Monetary Authority of Macao (AMCM)
  
• Candidate
  who has IT Audit or IT Governance, Risk, and Compliance (GRC) experience will be
  an advantage
  
• Committed,
  proactive, assertive and positive with a can-do attitude
  
• Strong
  team player to collaborate with a diverse team
  
• Thrive
  in a fast-paced environment
  
• Fluent
  in both spoken and written English and Chinese
  
• Candidate
  with less experience will be considered as Analyst