Deputy IT Manager, Security & Compliance (Ref: ITD-SCA-SH-ICBCA)

Industrial and Commercial Bank of China ( Asia ) Limited; Hong Kong Island; On-site; HKD 480,000 - 720,000; Full time

Job summary

An established financial institution is seeking a Deputy IT Manager for Security & Compliance in Hong Kong. The ideal candidate will enhance IT security controls, ensure compliance with regulations, and coordinate audits. A university degree in Computer Science, relevant certifications, and a minimum of 4 years' experience in IT are required. The role also demands strong organizational skills and proficiency in English and Chinese.

Qualifications

• Minimum 4 years' experience in Information Technology, preferably in financial institutions.
• Strong knowledge of regulatory requirements and understanding of the financial industry.
• Good command of spoken and written English and Chinese, including Putonghua.

Responsibilities

• Work with development and infrastructure teams to enhance IT security control.
• Perform compliance checks with IT security standards.
• Coordinate audit engagements and ensure action plans are completed.

Skills

Information Technology

IT security

Regulatory compliance

Network Infrastructure

Time management

Organizational skills

Education

University graduate in Computer Science or related discipline

CISSP/CISA/CISM/CRISC/CEH/ITIL v3

Tools

Privileges ID Management

Network Security Monitoring

End Point Protection

Security Incident Event Management System

Data Loss Prevention System

Job description

Deputy IT Manager, Security & Compliance (Ref: ITD-SCA-SH-ICBCA)

Responsibilities:

• Work with local development and infrastructure teams and Head Office’s Technology department to identify and enhance IT security control.
• Perform regular checking to ensure the compliance with Bank-wise IT security standard and regulatory requirements.
• Participate in security / controls gap analysis to define and implement necessary solutions for compliance.
• Co-ordinate, support audit engagement and response to the inquiries from regulator and auditor and monitor the resolution of audit findings as well as ensure agreed action plans are completed as planned.
• Work with Operational Risk, Internal Audit and Head Office Technology counterparts to interpret and analyze new regulatory requirements and work with business units to define and implement necessary processes and technology solutions for compliance.
• Promote IT security awareness and share best IT security best practice as well as to adhere to and be able to demonstrate adherence to internal controls.

Requirements:

• University graduate in Computer Science or related disciplines. One of the following certificates are required: CISSP, CISA, CISM, CRISC, CEH, ITIL v3.
• Minimum 4 years' experience in Information Technology in Financial Institution and preferably information security related experience.
• Sound knowledge of regulatory requirements and strong understanding of financial industry.
• Knowledge on Network Infrastructure and Design is preferred.
• Knowledge on IT security tools such as Privileges ID Management, Network Security Monitoring, End Point Protection, Security Incident Event Management System and Data Loss Prevention System are desirable.
• Able to work independently with good time management.
• Strong organizational skills and ability to manage multiple demands and changing priorities.
• Good command of spoken and written English and Chinese, including Putonghua.
• Candidates with more experience will be considered for Senior Position.

To apply, please send full resume including present and expected salary to

Personal data collected will be used for recruitment purposes only