Information Security Risk Consultant, insurance, 70 - 80K

Responsibilities:

• Keep abreast with updated information security policies, standards and guidelines and implementing it to ensure high levels of integrity, confidentiality and availability of the IT resources
• Lead the implementation of Technology Risk projects and processes
• Establish processes to identify Technology Risks and breaches to ensure the assets and information are appropriately secured all the time
• Lead the Improvement the overall security assessments
• Consolidate negative audit findings reported by security audit team and track the remediation progress
• Coordinate training and cybersecurity communication to enhance the security awareness of colleagues
• Governance the processes of regular assessment on different applications and systems and recommend improvements

Requirements:

• University degree in Computer Science, Information System or related disciplines is preferred
• 5-7 years' experience relating to technology risk management or relevant control function in financial field
• Familiarize with technology risk management and regulatory requirements
• Sound project management experience
• Previous IT risk control or audit experience and project management will be an advantage
• Able to work independently, handle and manage tasks with tight deadlines
• Certified with CISSP, CISA or CISM preferred
• Excellent presentation and communication skills
• Proficiency in both Chinese and English