Back to search

Head of Cybersecurity, Investment bank

Recruit Logic Hong Kong
Full time Permanent On-site HK$150k - HK$155k

About the job

Key Areas of Responsibilities

  1.  Revise CSI’s cyber security and data security framework, policies, standards, and procedures for cybersecurity and data handling
  2.  Establish, implement, and enforce a comprehensive governance framework that aligns with CSI’s policies defining data management, data lifecycle, data protection and data leakage protection
  3.  Ensure CSI’s infrastructure, systems and applications adhere to laws, regulations and best industry standards (e.g., GDPR, MAS, ISO 27001, NIST, Data Protection laws in China)
  4.  Maintain audit readiness and respond to compliance assessments, audit inquiries, client questionnaires, and regulator’s requests
  5.  Identify, assess, and prioritize cyber risks to the organization. Build an effective cybersecurity and data management framework and deploy it
  6.  Establish governance to CSI’ vulnerability management program with Application and Platform teams
  7.  Provide regular reports and dashboards on cybersecurity governance and compliance status
  8.  Ensure full compliance to all company policies, required training and regulatory requirements
  9.  Establish a cloud governance framework to manage CSI’s multi cloud strategy involving AWS, Azure, and Alibaba Cloud
  10.  Assist to manage IT security portfolio at CSI

Requirements

  1.  Bachelor’s degree or above in computer science, engineering or related domain discipline
  2.  Minimum 15 years of relevant experience in IT, cyber, and data security
  3.  Ability in manage IT projects and stakeholders of IT projects
  4.  understanding of / Demonstrating familiarity with Cyber Security topics – Firewalls, WAF, Application security, Cloud security, web gateway, endpoint protection, SIEM, threat hunting, identity access management, application whitelisting, O365, data leakage protection, network security, email security, etc.
  5.  Strong interpersonal / organizational / problem-solving / project management / client serving / multi-tasking skills
  6.  Able to work independently / attention to details / result-driven/ self-motivated / self-starter / proactive mindset / enthusiastic/ a team player
  7.  Strong leadership skills
  8.  Able to drive projects involving multiple teams and knowledge domains
  9.  Excellent command of / fluent in both spoken and written (English and Chinese (Putonghua is a must))
  10.  Certification – Highly desirable — CISSP, CISM, CISP, ISO 27001 Lead Implementer/Auditor