• Establish and maintain Technology and Information Security risk oversight and risk sensing through insightful analysis of integrated KRIs
• Establish and drive the periodic attestation programme on effectiveness of Bank Group’s Technology and Information Security Risk Management
• Lead review on technology and information security focus areas where effectiveness of controls requires improvements
• Participate in various core committees related to technology risk or information security to maintain effective risk oversight
• Apprise concerned departments and parties regularly of both local and global technology and information security risk landscape with change factors to response to critical risks, where required, and  escalate any un-mitigated key risk issues

Requirements:

• University degree (Bachelor or Master level) in Technology or Information Security related disciplines
• CISSP, CISA, CISM and/or CRISC qualified; ITIL certification advantageous
• Minimum 10 years’ experience in  technology or information security risk management in Financial Services Industry
• Good knowledge of IT management controls, processes and best practices. Familiar with industry security standards, primarily ISO 27001, SABSA and regulatory guidelines (e.g. HKMA,PDPO SOX)
• Strong written and communication skills, influencing skills
• Strong leadership, be able to work independently and work under pressure

(Candidate with less experience will be considered as Manager, Technology & Information Security Risk)

Attractive remuneration package with excellent fringe benefit will be offered to the right candidate. Interested parties, please send your FULL RESUME (in MS WORD format) with availability, current and expected salary to info@godwinasia.com or you can contact us at (852) 3667 9197 / Fax (852) 3667 9002 for any enquiry.

For more information about our company, please visit our website at www.godwinasia.com. All information provided will be treated in strictest confidence and used solely for recruitment purpose.