Position summary

The primary focus of this role is to assist subsidiaries of the Jardine Matheson Group to improve their cybersecurity programs through the application of appropriate security tools, methodologies and software development and IT operations best practices.

Role & responsibilities

• Creating and documenting standards, including configuration baselines, and management and operating best practices, for security and IT infrastructure
• Evaluating and selecting tools to support secure software development and creating best practices for their use, including for web and mobile applications
• Creating security architecture templates and helping subsidiaries to adapt them to their IT environments
• Helping subsidiaries to review their security programs against current security frameworks (NIST, CIS, ISO 27001, etc.) and best practices to identify gaps and develop enhancement programs
• Developing security metrics to analyse effectiveness of security programs and track improvements over time
• Guiding and training IT and security staff in subsidiaries on the application and execution of the standards, tools, metrics and best practices

The Ideal Candidate

• University graduate – preferably in Information Security or Computer Science
• Minimum of 7 years working experience in Information Security roles, with experience in IT security strategy development and execution
• Professionally qualified (e.g., CISSP, CISM, PCI ISA or OSCP)
• Extensive experience and knowledge of application and infrastructure security, IT operations, enterprise networking, operating systems and database security, and secure software development
• Familiar with Data Privacy and PCI regulatory compliance requirements
• Experienced in working in a global or regional environment
• Experienced in managing vendors or working with managed services providers
• Experienced in incident response and planning, with an understanding of computer forensics
• Self-motivated, analytical and possessing good interpersonal and problem-solving skills
• Passionate about using technology to solve business problems
• Strong written communication skills in English.  Good Chinese language skills an advantage

All information provided by applicants will be used for recruitment related purposes and handled in strict confidence by authorized personnel. The personal data of unsuccessful applicants will be destroyed when the post is filled.