Responsibilities:

• Lead implementation of information security projects in the bank
• Identify and report technology risk and develop appropriate risk mitigation plans
• Conduct independent security review and serve as an internal information security consultant
• Assist project teams to conduct product or system evaluation on information security areas
• Prepare, update and execute policies, guidelines and procedures related to information security
• Monitor and ensure IT practices comply with prevailing security policies and regulatory guidelines
• Conduct regulatory related assessments and other exercises to comply with internal and external mandates
• Initiate, facilitate, and promote activities to create information security awareness within the organization
• Bring in current information about information security technologies and regulatory developments
• Execute security logging and monitoring service with adequate coverage and due diligence
• Take park in security services delivery when required

Requirements:

• University graduate in Information Technology or Computer Science
• At least 5 years IT risk and security experience focusing on financial services industry. Experience should cover in the areas of information security, operational risk management and corporate security
• Working experience in financial services industry is preferred
• Knowledgeable on technology risk management processes and tools
• Knowledgeable in security technologies, including authentication, threat management, network security access control, cryptography, PKI, database security, vulnerability scanning, penetration testing, secure code review, IT forensic tools, etc
• Hands-on experience in working with operational risk management / risk control, internal / external auditors, compliance, and regulators is preferred
• Maintain contact with information security solution providers, vendors, consultants, organizations and industry working groups
• Attend external IT seminars / conferences to stay abreast of technology innovations that can improve the design and development of information security management framework