Responsibilities:

• Coordinate security assessments to identify security loopholes 
• Review and analyst assessment results to define mitigation actions and plans
• Propose and work closely with various IT teams to follow up  on remediation actions, ensuring IT environment complies with regulatory requirements
• Communicate and work closely with 3rd party vendors to ensure they comply with regulatory requirements
• Liaise with external consultancies throughout assessment and audit cycle 

Requirements:

• Holder of Bachelor’s degree with related IT security/ risk qualifications, i.e. CISA, CISM, CISSP, CEH, etc. 
• With 5+ years’ IT security and/or technology risk experience
• Familiar with regional regulatory security standards, i.e. HKMA, SFC, IA, MAS, etc.
• Experience in C-RAF and/or GL20 preferred
• Good command of both written and spoken English and Chinese (Cantonese and Mandarin)

• Which of the following statements best describes your right to work in Hong Kong?