Manager, Security & Risk (Risk Management)

Job Reference: OCL/RM/2010-003

Key Responsibilities:

• Conduct security and risk assessment to identify the weakness of controls in the IT systems, payment infrastructure, business and operational processes, and provide expert security advice/recommendation to address the findings
• Perform security and risk compliancy review to meet the corporate governance objectives
• Provide practical and fit-for-purpose expert security advice to internal departments
• Conduct proactive regular security monitoring
• Support the fraud and security incident investigation

Requirements:

• Bachelor degree in Computer Science or a related discipline, preferably with relevant professional qualifications such as CISSP/CISA/CISM
• Minimum 5-8 years experience in a security management or IT risk management related role within financial industry, IT related business or consulting firm
• Have practical experience of IT security management specifically in the area of payment security, key management, system, network and database security
• Have practical experience of conducting control and risk assessment
• Experience in fraud prevention, security incident handling, financial industry regulatory compliancy would be a plus
• Knowledge in software development life cycle and programming language (C, Java) would be a plus
• Professional oral and written communication skills