Our client, a leading bank, is looking for a strong Information Security Expert for their growing team. Selected candidate will be the expert person to drive the information security management. Great exposure and opportunity.

Responsibilities:
– Develop IT policies, standards, and procedures based on security governance frameworks (e.g. COBIT, PCI)
– Review IT initiatives from technology risk perspective and implement security controls
– Perform security assessment including threat & vulnerability management, investigate security incidents and conduct root cause analyst
– Act as a subject matter expert to provide information security consulting & advisory services
– Responsible for security incident and technology related fraud investigations
– Perform IT security assessments to and evaluate existing controls
– Execute the technology risk management processes to identify emerging or existing technology risk
– Manage the security measure, security products, systems, procedures and standard in the firm
– Define and maintain the infrastructure and application security framework and provide security assessments
– Provide and review security solution design

Required Skills/Experience:
– At least 7 years of relevant IT Security and Information Security experience, ideally from a banking background
– Extensive experience of infrastructure & application security, vulnerability assessment and technical mitigation
– Great understanding of IT Security practices, methodologies, tools mechanisms and trends
– Strong understanding of financial industry businesses and Technology Risk regulations
– Strong organizational skills and an ability to manage multiple demands and changing priorities. Detail oriented
– Understanding of regulatory requirements from HKMA/SFC
– CISA, CISM, CISSP or equivalent industry certification