About the Company

Our client is one of the most well recognized company in Hong Kong and with the vision to digitally transform their corporate services, they are now seeking for a CISO to upscale their capability in order to cope with their business growth.

About the Role

Reporting to the CIO, you will establish and execute strategic, comprehensive enterprise information security program directives and plans, including any and all district-wide information security training efforts to ensure that the confidentiality, integrity, and availability of information is owned, controlled or processed in a manner compliant with company policy and relevant regulatory authorities. Develop, implement and monitor a strategic, comprehensive enterprise information security and IT risk management programme while maintaining and enhancing an information security management framework and all related policies and processes. Drive information security policies, standards, guidelines and oversee the dissemination of security policies and practices; identify knowledge gaps to increase district awareness of relevant information security practices. Provide leadership and guidance on information security topics, advising and collaborating on security processes, business continuity, and disaster recovery plans. Monitor external threat environment for emerging threats and advise relevant stakeholders on appropriate courses of action. Lastly, liaise with relevant business units (such as Internal Audit, Law, Finance, Safety & Security, Risk Management, HR teams), and external agencies as needed to ensure that the company maintains a strong security posture. Lastly, assist with overall technology planning, providing a current knowledge and future vision of technology and systems.

The Successful Applicant

• Minimum of seven 15 years' experience in information technology field, with five to seven years of experience in an information security role.
• Proven track record and experience in developing information security programs, policies and procedures, including successful implementations in medium to large enterprise environments.
• Proven experience in Information Security, IT Risk Management, digital trust, IT regulatory, data protection, and business continuity management.
• Having certifications as ISO 27005, ISO 22301, ISO 27001, CISSP, CISM, ITIL
• Experience in designing and managing new and existing security systems
• Ability to advise infrastructure and applications staff in securing their respective environments
• Proven and significant leadership experience and/or formal management qualification
• Demonstrated expertise in an IT Security environment
• Experience in engaging and influencing stakeholders from diverse backgrounds
• Experience of managing and prioritising a budget

Click "Apply Now" to apply for this position or call Karen Cheng at +852 3180 4921 for a confidential discussion. All information collected will be kept in strict confidence and will be used for recruitment purpose only.