Job Description

• Your will be responsible for IT security governance and policies in this role. Your focus will be to ensure that regulatory requirements and IT security best practices are met, in maintaining a strong risk and governance process. You will be providing recommendations and advisory to the business and IT based on the ESR Information Security Management System (ISMS) whenever necessary.
• Maintenance of the Information Security Management System (ISMS) which is based on ISO 27001.
• Advise on and monitor information security risks, control failings and ISMS alignment.
• Manage and update policies, procedures, and controls to assure compliance with applicable regulatory, legal and audit requirements as well as good industry practices.
• Develop a risk management program that identifies and classifies risks, defines appropriate tolerances, prioritizes mitigation activities, and measures risk levels based on ESR\xe2\x80\x99s ISMS.
• Develop strong relationships with external audit and key stakeholders to ensure risk management oversight is understood, managed appropriately and current with all standards, guidelines, and applicable regulations.
• Coordinate security user awareness training and phishing simulation tests to promote a security aware culture.
• Develop relevant metrics, analyze data, identify trends and help drive improvements to the IT governance function.
• Act as budget controller in tracking and managing the IT spend. Coordinate the IT budgeting exercise. Drive cost savings through a license standardization and consolidation program.
• Act as manager in charge overseeing and governing the IT operations of the HK Asset Management entity.