信息安全高级主任

The Job 

• Monitor internal/external compliance reviews activities and follow up on deficiencies identified and ensure remediation steps have been taken
• Support control and vulnerability assessments, assist in compliance monitoring reviews to identify control weaknesses, recommend remedial actions
• Provide oversight vulnerability scanning results, and ensure timely remediation and follow up actions
• Report to management concerning residual risk, vulnerabilities and other security exposures, including misuse of information assets and noncompliance cases if any
• Provide an advisory role for IT stakeholders to assess security requirements and control; enforce security control policies as planned
• Assist in development of security guidelines, standards and related processes
• Assist in validating baseline security configurations for operating systems, applications, networking and telecommunications equipment
• Research and assess new threats and security alerts, and provide recommendations on solutions
• Assist to build/review/monitor the IT security architecture for the Company infrastructure and business application environment
• Promote IT risk awareness to internal stakeholders 

The Person 

• Degree holder in IT, Computer Science or related disciplines
• Minimum 3 years’ experience in IT industries with at least 2 years in security related role
• Experience in information security management framework such as ISO 27001, BS7799
• Training in Information Security disciplines such as CEH, CISA or CISSP is highly preferred
• Knowledge of Information Security best practices
• Experience of vulnerability management and related assessment activities
• Previous experience in full stack security solution implementation is highly desirable
• Strong project management and execution experience
• Self-motivated and able to work independently
• Good problem solving, analytical, communication and interpersonal skills
• Good command of written and spoken English and Chinese