The Job
· Monitor internal/ external compliance reviews activities and follow up on deficiencies identified and ensure remediation steps have been taken
· Perform control and vulnerability assessments, assist in compliance monitoring reviews to identify control weaknesses, recommend remedial actions
· Report to senior management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance cases if any
· Provide an advisory role to business units and IT groups to assess security requirements and control; enforce security control policies as planned
· Assist in development of security architecture, policies, standards and related processes
· Resolve negative audit findings reported by internal and external audits by working with the IT action owners and tracking the remediation progress
· Develop and validate baseline security configurations for operating systems, applications, networking and telecommunications equipment
· Research and assess new threats and security alerts, and provide recommendations on solutions
· Assist to build/ monitor the IT security architecture for the Company infrastructure and business application environment
· Promote IT risk awareness to business units
The Person
· Degree holder in IT, Computer Science or related disciplines
· Minimum 8 years’ experience in IT industries with at least 2 years in security related role
· Solid experience on information security management framework such as ISO 27001, BS7799
· Certification in Information Security disciplines such as CISM, CISA or CISSP preferred
· Knowledge of Information Security best practices, such as PCIDSS or Secure SDLC is an advantage
· Experience of incident response is highly preferable
· Strong project management and execution experience
· Self-motivated and able to work independently
· Good problem solving, analytical, communication and interpersonal skills
· Good command of written and spoken English and Chinese
