信息安全主任

Job Summary

The Information Security Officer role involves: Evaluates, tests, recommends, develops, coordinates, monitors and maintains information systems (IS) and cyber security policies, procedures and systems, including access management for hardware, firmware and software. Ensures that IS and cyber security architecture/designs, plans, controls, processes, standards, policies and procedures are aligned with IS standards and overall IS and cyber security.

Identifies security risks and exposures, determines the causes of security violations and suggests procedures to halt future incidents and improve security. Develops techniques and procedures for conducting IS and cyber security risk assessments and compliance audits, the evaluation and testing of hardware, firmware and software for possible impact on system security, and the investigation and resolution of security incidents.

Implements IS and cyber security policies and takes measures against intrusion, frauds, attacks or leaks. Roles & Responsibilities: Reporting to Information Security Manager, executing routine security checking regularly at contact centre. Produce security checking reports in regular basis. Ensure the defined Security process flows and activities are in place as expected.

Ensure all information security initiatives are deployed properly on defined timeline. Assist in managing and coordinating security incident response, handling and investigation process. Assist in conducting or managing information security assessment include vulnerability scanning independent penetration test on infrastructure.

Preferred Qualifications

Good written English, good oral and written Mandarin. Work independently with minimal supervision. Min 3 years of proven experience and practical knowledge on implementing information security frameworks or standards, such as ISO, COBIT, ITIL. Relevant qualification such as CISSP, CISA will be an advantage. Higher Diploma or above in Information Security or IT related disciplines.

Excellent interpersonal and communication skills.