Senior Manager - Information Security and Technology Risk

Our client is from public sector; we are mandatedto identify a high-calibre technology security professional individual for the captioned role.

Accountabilities:

1. Developing and formulating the monitoring framework and mechanism in respect of information security, covering physical data / information security and cybersecurity, and technology risk management for the operation of the Platform by a third-party delivery partner (the “Delivery Partner”);
2. Overseeing and managing the Delivery Partner’s performance and delivery of information security and technology risk related initiatives, including but not limited to the development of reporting metric (such as performance indicators and risk indicators), incidents and risk register for identifying, recording and monitoring potential risks, and ensuring proper follow-up on the risks identified through appropriate rectifications, remedial actions and / or mitigation measures;
3. Driving and implementing, enforcing, monitoring and continuously enhancing supervisor framework, policies and procedures governing information security and technology risk management in support of the operation of the Company Platform;
4. Performing regular assessment on information security and technology risk to ensure compliance with the relevant policies, laws and regulations;
5. Lead and support for regular and ad hoc reporting to the management of the Company on work progress and potential issues.

Skills and Qualifications:

1. Degree holder in Computer Science / Information Security or related disciplines;
2. Around 10 years of relevant experience in related fields e.g. technology risk, information security, cyber security and regulatory compliance;
3. Relevant technology management and/or IT audit qualifications e.g. CISM, CISSP, CISA, CRISC or equivalent;
4. Good knowledge on information security and technology risk management principles and best practices;
5. Knowledge of the relevant personal data privacy laws and regulations (e.g. the PDPO) is preferred;
6. Knowledge of security in infrastructure and applications;
7. Proactive, responsible, good problem solving, communication and interpersonal skills, and a good team player with analytical thinking;
8. Good command of written and spoken English and Chinese; and
9. Mature, detail-minded and able to work under pressure.