Assistant Manager - Group Cyber Security
CK Hutchison Holdings Limited
- Company Industries：Mixed Industry Group
Job Information
- Post Date：2022-08-19
- Location：Hung Hom
- Yr(s) of Exp：5 years
- Qualification：Degree
- Employment Type：Full Time
- Job Function：Information Technology (IT) Security
Job Description
CK Hutchison, head office of a diversified group of companies with over 17,000 employees in Hong Kong and an additional 285,000 employees worldwide, invites high calibre and self-motivated individuals to join our organisation.
The Group Information Services Department, located in Hunghom, strives to serve the IT needs of Head Office and is responsible for co-ordinating IT related services within the CK Hutchison Group.
We are looking for a cyber security professional accountable to the Manager – Group Cyber Security to assist in the establishment and maintenance of appropriate risk management and governance frameworks, processes and technical controls. The Assistant Manager – Group Cyber Security will also involve in defining and assessing the organisation's security roadmap, architectures and practices through the implementation of various security solutions and services.
Responsibilities:
- Assist to manage Group level cyber and information risk management governance processes, work closely with Group and business unit stakeholders to facilitate cyber risk assessment and communicate current risk posture
- Assist to drive the collaboration across the Group to ensure consistent cyber security management in support of the business goals
- Review and maintain cyber security policies, guidelines, security standards, operational processes and procedures for the Group
- Involve in defining and reviewing of security roadmaps based on the cyber security strategies and compliance requirements
- Coordinate in delivery of cyber security awareness program to promote security awareness to all employees
- Create necessary internal networks among different teams to ensure alignment as required, and build external networks with all relevant parties to address common trends, findings, incidents and cyber security risks
- Liaise with external agencies, such as law enforcement and other advisory bodies, to ensure that the organisation maintains a strong security posture and is kept well-abreast of the relevant threats identified by these agencies
- Conduct research to evaluate new emerging technologies and maintain an up-to-date understanding of the latest threats, vulnerabilities, mitigation strategies, industry best practices, regulations and assist in benchmarking risk management practices against other companies
- Prepare of security advisories, bulletins, and newsletters
Requirements:
- University degree or above in technology-related field, or equivalent
- At least 5 years of relevant experience in cyber security field
- Relevant professional qualifications such as CISM, CISA, CISSP, CRISC, ISO 27001 Lead Auditor, SANS GIAC, etc.
- Knowledge of ISMS, ISO27000 series, NIST and other major cyber security frameworks and cyber security laws
- Sound working knowledge of cyber security risk management and technologies
- Experience in developing, revamping and maintaining cyber security policies, processes and procedures
- Experience in hosting security awareness program in the past a plus
- Hands on experience in implementing any of the following solution(s) a plus:
- Governance, Risk and Compliance
- Identity and Access Management
- Data Loss Prevention
- Web Filtering
- Security Incident and Event Management
- Endpoint Protection
- Mobile Security
- Cloud Security
- Encryption
- Possess domain competencies in a number of cyber and information risk related disciplines, including security architecture, security operations, application security, infrastructure security, cloud security, risk management, vulnerability management, business continuity management, or privacy and compliance
- Good strategic planning, problem solving and analytical skills
- Excellent written and verbal communication skills, interpersonal and collaborative skills and able to communicate cyber security and risk-related concepts to both technical and non-technical global business unit stakeholders
Salary and benefits will commensurate with experience and competence. Please click the "APPLY NOW" button and include a detailed resume with indication of expected salary.
We are an equal opportunity employer and welcome applications from all qualified candidates. Personal data collected will be treated in the strictest confidence and handled confidentially by authorised personnel for recruitment-related purposes only within the CK Hutchison Group of companies.
Applicants not having heard from us within six weeks of the date of application may consider their application unsuccessful. The personal data of unsuccessful applicants will be destroyed after the recruitment exercise pursuant to the requirements of the Personal Data (Privacy) Ordinance in Hong Kong.
Company Info
CK Hutchison, head office of a diversified group of companies with over 17,000 employees in Hong Kong and an additional 285,000 employees worldwide, invites high calibre and self-motivated individuals to join our organisation.
| Position | Company | Location | Update |
|---|