Job Summary

The Head of Information Security is to enable HKEX to manage information security effectively by providing strategic direction, functional leadership and in-depth technical and operational expertise.

Reporting to the COO of HKEX HK IT, this role will manage a team to implement the group-wide information securitys trategy, policy and control requirements.

Job Description

• Work closely with the HKEX Group CISO to continuously improve the security management framework
• Lead a team for the daily operation of a Security Operation Center (SOC), maintain and enhance processes for detecting, analyzing and responding to information security incidents to protect corporate IT assets
• Manage a security governance function to define, maintain and enforce IT security policies to ensure consistent application across all technology projects, systems and services
• Maintainan up-to-date knowledge of Information Security standards, best practice and the threat landscape.  Monitor Information Security trends and potential threats to HKEX;
• Oversee and support implementation of IT security projects
• As the primary control point during significant information security events and convene a Security Incident Response Team as required
• Coordinate internal and external auditand lead the resolution of audit actions relating to IT security
• Tracking latest IT security innovationsand keeping abreast of latest technologies

Requirements

• Degree qualification in Computer Scienceor related discipline
• Certifications such as CISA or CISSP would be an advantage
• Minimum 10 years of progressive experience in information security management, including experience with relevant information security frameworks in financial services or other regulated industry
• Proven experience in successfully managing Security Operation Center (SOC) and incident response team (SIRT)
• Excellent communication and presentation skills, able to interact at all levels and be effective as part of a broaderteam
• Knowledge of regulatory environment and requirement