Fast-growing software house and IT solutions provider in Hong Kong Job Description
Responsible for the development of the company IT Security and technology risk related policies, guidelines and standards operating procedures Participate in internal regular security assessment and compliance review activities Perform vulnerability scanning and penetration test, analyze the results and propose solutions Ensure internal IT departments and key business units are compliant with the company IT Security Policies and standards Provide technology risk management support, security incident responses and security threat intelligence analysis Maintain a regular governance for managing the information security risks performance Support the ongoing maintenance and update of the company IT Security Policies and Standards according to the industry best practices (i.e., ISO 27001 and SANS) Preferably with a technical background in networking/coding/security control and practice in the Financial Industry Conduct necessary IT Security and Risk control monitoring, testing to determine the control effectiveness Direct report to Managing Director Job Requirements
Degree holder in Computer Science, Information Technology or related disciplines At least 8 years’ relevant experience in Information Security, Risk Management area Solid experience and knowledgeable of key security technologies Certification holders of CISSP / CISA is preferred Information Security Certification holders of SANS GCIH/ SANS GPEN/ SANS GWAPT/ OSCP/ OSCE is preferred Mature, adaptive with good analytical skills Strong interpersonal and communication skills Good command of both spoken and written Cantonese, Chinese and English Business travel is required
#J-18808-Ljbffr