Responsibilities

• Monitor and follow up with IT teams for any non-compliance issues. Provide practical advice and coordinate plans for remediation/ mitigation of risks and exposure; review remediation results
• Coordinate internal and external audit work over IT operations and processes; liaise with IT teams in gathering documents and testing related IT controls during audit reviews
• Execute internal compliance review to identify IT risks and potential security threats. Report activities toward continuous improvement. Initiate IT security related project/ product evaluation for improvement
• Provide end-to-end system support and on-going improvement for different security tools including upgrade and maintenance
• Coordinate with Corporate and local IT teams to handle security related projects
• Prepare various security reports for IT teams and management. Participate in researching and implementing the latest Technology
• Assist in Investigating reported security case and follow up with users for any non-compliance issues and coordinate plans for remediation/ mitigation of risks and exposure

Requirements

• Bachelor's degree in computer science, Information Technology, Information Systems or related disciplines
• Min. of 3 years working experience in information security, IT auditing or consultancy, preferable in a Big-4 or in a multinational firm
• Certificate in CISA, CISSP, SSCP or CAP
• Knowledge of IT security management such as ISO 27001, IT audit/ compliance including Sarbanes-Oxley and/or SSAE18, industrial best practices e.g. COBIT, and PCI DSS is a plus
• Strong interpersonal skills, detail-minded and pro-active to solve problems and work independently
• Proficient in both Chinese and English