This position reports to Risk Technology Team in IT Department. As the Information Security Manager, you will be responsible for :

• Act as a 2nd line of defense inside IT Department to oversight and monitor technical risk and cybersecurity (i.e., 1.5 line of defense).
• Develop and translate technology risk and information security frameworks and guidelines according to SFC and company policies into practical action plan.
• Drive/monitor the implementation of technology risk policies and procedures to IT teams.
• Conduct periodic risk and control assessments from technology risk perspective.
• Support IT's BCP arrangement and cooperate with the company's BCP workgroup for BCP needs

• Holder of Bachelors Degree or above in IT/Computer Science/Account related disciplines
• Certified in professional certifications, e.g.: CISA, CISM, CRISC, CISSP, etc..
• 5+ years' working experience in InfoSec/TRM/IT Audit
• Knowledge with SFC requirements on Technology Risk
• With sound knowledge of IT infrastructure, network security, SDLC, 3rd party risk and etc.
• Willing to work for 1.5 line within IT Department.
• Proficiency in spoken English and Chinese (Cantonese/Putonghua), and must able to read/write Chinese.

We offer an attractive remuneration package to the right candidate. Interested parties please forward your full resume with availability, expected salary by pressing "Apply now" or send it to 27/F., Low Block, Grand Millennium Plaza, 181 Queen’s Road, Central, Hong Kong.

(Data collected will be kept strictly confidential and used for recruitment purpose only.)

Guotai Junan International Holdings, a well established and reputable financial group in Hong Kong, is looking for high caliber professionals to take up the following positions:-