Job Responsibilities
- Formulate and oversee the corporate IT governance and security
- Develop and maintain IT policies, standards, and guidelines according to public organization best practices, corporate’s business requirements and local regulations
- Perform regular review to ensure the ongoing compliance of internal policies and standard operating procedures, including but not limited to ISO 27001, NIST and CIS control
- Assist IT teams in internal & external stakeholders, including pre-audit review, penetration test, liaison with legal team, corporate compliance team and other stakeholders, post-audit follow-up, BCP drill, etc.
- Promote information security awareness within the corporate
- Explore technical solutions for protecting the corporate assets in related to information
Job Requirements
- Bachelor Degree in Information Technology related disciplines
- Minimum 6 years of working experience with solid track record in IT security & governance, and compliance areas in sizable organization, ideally with presence in public organizations or quasi-government organizations
- Practical knowledge in global standards / framework, e.g. ISO 27001, NIST and CIS control
- Proactive, strong problem-solving skills and ability to work under pressure
- Holder of related professional certification (e.g. CISM, CISA, CISSP or CRISC) in and advantage
- Excellent presentation & communication skills and excellent command of verbal & written English and Chinese (both Cantonese & Mandarin)
- Candidate with more experience will be considered as Manager, IT Security