Our client is a leading Insurance company with office around the globe. They are looking for high caliber "IT Security professional" to take up the new challenge.

Responsibilities:-

• Develop IT security technologies and frameworks in alignment with Information Security guidelines and governance and ensure consistency with regional standards.
• Ensure that the processes for security monitoring are in place; security logs are maintained, reviewed and actions are taken as necessary.
• Coordinate with various departments on the adherence to Group Information Technology Security Policies & Guidelines.
• Lead the formulation and maintenance of local security procedures and ensure that they are being adhered to Regional IT Security Policies by relevant parties such as conducting risk analysis on all new systems / major enhancements.
• Manage IT security gap analysis of all IT functional areas such as applications, infrastructure, databases, network, data centre service and security operation.
• Evaluate, review and propose security requirements to new systems / major enhancements and conduct security review on all planned new hardware and software to ensure there are no compromises to security standards and procedures.
• Assess, recommend, lead and implement security controls and modules to ensure sufficient protection to the IT environment.
• Keep abreast of security related technology, practices and regulations according to Regional requirement or in the marketplace.
• Perform security audits, monitor compliance, and perform risk and vulnerability assessments of the information technology systems.
• Monitor and assure that policies and procedures related to accuracy, integrity, confidentiality and security are followed by team members and departmental personnel in the implementation and maintenance of information technology systems.
• Ensure security controls are adequately meeting regulatory requirements and Regional IT Security Policy.
• Provide reporting and metrics on the state of security ongoing and associated IT security risks.

Requirements:-

• Degree in Computer Studies, or related disciplines.
• At least 8 years IT security or information security (technical) experience on Wintel / UNIX, Workflow, Content Manager, server, database, Lotus Notes administration.
• Broad knowledge of security domains, trends, and technologies (such as threat and vulnerability management, firewall security, identity & access Management, endpoint security, web application security, data loss prevention, encryption, security hardening, secure SDLC).
• Knowledge of Data Encryption, Ethical Hacking, Internet / Intranet, Security Risk Assessment Audit as well as Wireless LAN / Mobile.
• Experience in writing security guidelines.
• Auditing experience is an advantage.
• Experience in a finance or insurance setting
• UNIX, relational databases, Lotus Notes and Network.
• Root id management.
• Technical understanding of various platforms (e.g. Windows, Unix, network, database).
• Knowledge of risk management principles.
• Strong communication skills, able to communicate with a diverse constituency comprised of individuals whose IT security knowledge and experience vary widely.
• Strong desire to learn new tools and technologies.
• ISO27001 and PCIDSS experience is an advantage.
• Good command of both written and spoken English, and Chinese.

GlobalExec is one of the most successful and fast growing total human resources solution providers in Asia. We specialize in industries including Banking & Finance, Information Technology, Commerce, FMCG, Retails and Manufacturing sectors. Clienteles include major Banks, IT Vendors and Global 1,000 Companies. Our Consultants are all experienced professionals in specialized industries who possess strong business acumen and commercial awareness hence able to deliver our best practice at all time.

Suite 602-3, 6/F, Wing On Centre, 111 Connaught Road Central, Hong Kong
Tel : (852) 3551 9300       Fax : (852) 3551 9400
E-mail : [email protected] (preferable)
Website : www.globexec.com