Our client, a leading global financial institution, is looking for a Senior Technology Risk and Information Security professional to join their global security/risk team. The successful candidate will provide leadership, strategy and guidance in protecting critical technology and infrastructure platform. This role will be part of the global team and work hands-to-hands with global counterparts.

Responsibilities:
– Ensure that infrastructure related risks are appropriately communicated and mitigated.
– Advise business & technology users on technology risk policies/standards to ensure that the security principles are understood; Ensure that security solutions are adopted by the users.
– Perform risk assessments to identify gaps in compliance to information security & BCP standards and policies (in-house and external technology platforms)
– Work closely with senior key stakeholders to report high-priority risk issues and recommend strategies to mitigate them.
– Review potential risk exposure across infrastructure and technology vendors.
– Maintain a thorough understanding of regulatory requirements of the region in order to conduct internal self-assessments and gap analysis and ensure compliance.
– Participate in global and local risk/security initiatives
– Plan and drive the IS audit plan across various scope, where it can focus on high risk domains.

Required:
– At least 10 or more years of technology experience, either in technology risk/security, infrastructure or application development.
– Strong knowledge of risk control frameworks, risk management practices and regulatory requirements.
– Background and certifications in Information Security (CISSP, CISM, SANS) and Auditing (CISA).
– Strong project management and leadership skills.
– Demonstrable ability to define and drive strategy while working closely with and influencing senior stakeholders.
– Ability to work effectively as part of the global team supporting a wide technology community.
– Familiarity with Risk Analysis and Risk Management methodologies is preferred.
– Experience in business continuity management or technology crisis management is preferred.