Responsibilities:

• Act as the coordinator for managing the cyber resilience programme and maintaining cyber resilience strategy for the company
• Prepare and maintain cyber resilience programme plan and schedule; track the programme progress and prepare regular status reports, as well as manage the logistics of the programme status meetings
• Provide interpretation of cyber resilience controls and regulatory requirements; suggest industry best practices and provide advice on cyber resilience controls implementation
• Conduct cyber resilience risk assessment for the company and provide input to risk metrics reporting
• Maintain and execute cyber threat intelligence collection, analysis and sharing processes
• Coordinate with relevant parties to prepare programme budget and liaise with internal and external auditors in performing cyber resilience assessment and scenario based simulation testing

Requirements:

• University degree preferably in information technology, information security, computer science or related discipline
• Minimum 8 years of experience in technology risk and information security with at least 2 years’ experience in managing technology risk and/or information security projects gained from major financial institutions
• Expertise in technology risk and information security best practices, with broad knowledge of information risk and security issues, requirement, trends, data privacy and industry practices
• Familiar with ISO27001 and HKMA technology risk management and cyber security guidelines. Certification of CISA, CISM, CRISC and/or CISSP is preferred
• Team player with sound interpersonal and communication skills as well as excellent problem solving and analytical skills

All information provided will be treated in strict confidence and used solely for recruitment purpose.

For more job opportunities, please visit our website: https://npsl.com.hk/