My client is a leading big four investment bank. And they are looking for a VP position in their Global Information Security team.
Job title: Information Security Officer, Global Information Security
Job title: Information Security Officer, Global Information Security
This role and the team will cover Information Security topics related to HK, China, TW.
Your background
- An Information Security professional with 3-5 years in information security related activities, such as risk management, security design, implementation and testing, or security project management.
- Proven risk management experience identifying, analyzing and communicating business and security-related risks to the organization and corporate program.
- Good knowledge to the various areas of information security controls is an advantage.
- Maintain a broad understanding of Greater China laws and regulatory requirements relating to information security and privacy, industry best practices, exposures, and their impact to the business.
- Ability to work independently with minimum supervision and prioritize strategically.
- Experience in giving presentations with good interpersonal, communication and influencing skills.
- Ability to communicate well in English, and good business writing skills in English.
- Ability to speak or write in Chinese is an advantage.
- Ability to work with stakeholders in business and technology groups who are based in various locations.
- Competent in identifying the critical path and key issues, driving for solutions and articulating requirements to bring security initiatives or programs back on track.
- Must display knowledge and experience in problem and conflict management.
- Experience in managing information security related projects is an advantage.
- Certificate in project management or information security is preferred but not a must.
What you can expect
Reporting to the Greater China Senior Information Security Officer, person in this role will be a member of the Regional Information Security Officer's organization for APAC, and work closely with the various functions within the Global Information Security (GIS) organization as well as the stakeholders in Lines of Business (LOB's) and Technology teams to develop a strong information security risk-based program.
In specific, person in this role will be part of the team with other Information Security Officers in Greater China (based in different locations) to provide entity-level information security deliverables: a) be the accountable person under local regulation; b) be the delegate of legal entity management team; c) empowers entity managements to correctly and timely discharge their risk oversight obligations. This entity-level accountability will ensure a focus on the appropriate risk priorities for the Bank and the business. In this capacity, the role may cover key security assessment programs that are managed by the Information Security Officers, country-specific security initiatives based on regulatory mandates or internal requirements, or other BAU activities in the Country Information Security Officer domain.
What you will do
- Works closely with other Information Security Officers to deliver country-specific security assessments or initiatives on time with good quality.
- Acts as the point of contact for the assigned security initiatives, and proactively escalates for any issues, concerns or road blockers.
- Teams with other stakeholders in and outside GIS (who are based globally or regionally) to drive project progression.
- Suggests for any process improvement or simplification ideas.
- Reviews team deliverables, coordinates feedback from various stakeholders, and documents lessons learnt.
- Works with regional GIS teams and Learning team to ensure Greater China end users are trained on information security.
- Partners with other Information Security Officers to deliver regulatory submissions, management reporting or security assessment reports.
- Partners with the APAC GIS Policy team and analyzes the regulatory assessment requirements against the bank internal GIS policy and standards.
- Assists in the development, testing, implementation and review of security plans, products and control techniques.
- Provides advisory on information security to business in risk assessments and implementation of appropriate data security procedures and controls.
- Socializes the identified gaps and changes to internal stakeholders.
- Collaborates with risk and control partners on critical information security priorities.
- Influences and supports business to improve security metrics.
- Monitors existing and proposed security standards, local legislation and regulations.
- Acts as a local point of contact to the LOB during information security incidents.
- Backs up other Information Security Officers where appropriate, during leave of absences.
If this role is what you're looking for as your next job move, then please apply here and send your latest updated CV at preksha.tripathi@oliverjames.com
