Information Security Office Senior Lead Analyst

3 weeks ago


Hong Kong, Hong Kong SAR China Citi Full time

The Info Security Ops Group Mgr is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities in alignment with Citi's data security policy.

Responsibilities:

Manage a large/complex team or multiple teams, overseeing resources, budget, policy formation and short to medium term planning Manage and validate deliverables of all Information Security (IS) programs, ensuring closure per agreed timelines and goals Identify and assign key metrics (e.g. KRI/KPIs) to support effective monitoring and management of operational risk including controls assurance and ensure issues identified and corrective actions are raised to address gaps. Provide strong oversight of CAP (Corrective Action Plan) remediation activities both for audit and control issues including quality completion of Risk Exception documentation and annual

renewals. Support the assigned technology platform re ensuring the remediation of corrective actions relating to both self-identified and audit issues are completed on time and with the

appropriate level of quality and adherence to IBAM.

Conduct cost-benefit analysis to justify IS investment, and build the IS team by promoting partnerships, and marketing IS developments Partner with Global Information Security Officers and Global Information Security Program Managers to improve processes and reduce risk Ensure risks are identified, assessed, mitigated and controlled, and assist Security Incident Response Teams as the Business IS Consultant Ensure Control Preparedness and control effectiveness, as part of the Audit preparedness exercise, ensuring IS programs are audit ready Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.

Qualifications:

10+ years of relevant experience Strong understanding of APAC Regulatory requirements Proven experience with scripting and programming languages preferred Advanced Microsoft Office skills preferred Demonstrated ability to collaborate with a variety of analytical groups and service delivery organizations Advanced analytical and problem solving skills Consistently demonstrates clear and concise written and verbal communication Proficient in interpreting and applying policies, standards and procedures Demonstrated ability to remain unbiased in a diverse working environment

Education:

Bachelor’s degree/University degree or equivalent experience Master’s degree preferred Relevant professional qualifications with Risk / Security management e.g. CISM, CISA, CISSP or equivalent Local language proficiency.

------------------------------------------------------

Job Family Group:

Technology

------------------------------------------------------

Job Family:

Information Security

------------------------------------------------------

Time Type:

Full time

------------------------------------------------------



  • Hong Kong, Hong Kong SAR China AXA Group Full time

    The duties of the Manager, Information Security includes:- Conduct security architecture review Provide professional security advisory and recommendations to minimize the impact within risk tolerance levels Conduct security risk assessment on technology solutions and/or technical controls Assess risk impacts on business Recommend and documenting risk...


  • Hong Kong, Hong Kong SAR China Zurich Insurance Company Full time

    Job Accountabilities Provide support to the APAC Information Security Team and Local Business Information Security Officers (BISOs) Assist in the improvement of Information Security processes, including exception management, supplier due diligence, and risk reporting Assist BISOs in executing security assessments such as vendor security due...


  • Hong Kong, Central and Western District, Hong Kong SAR China Macrotech Security & management Services Limited Full time

    職位:Hotel Senior Security Officer...


  • Hong Kong, Hong Kong SAR China AXA Group Full time

    Assisting to drive and implement on different information security assurance projects, initiatives, processes and audit related activities ( regular Local/Group reporting) with coordination with internal and external parties, including end-users, vendors, customers, regulators and auditors Perform security assurance testing, assessment, evaluation and...


  • Hong Kong, Hong Kong SAR China Wizlynx Group Full time

    Key Role As (Senior) Cyber Security Consultant & Penetration Tester, you will execute a variety of engagements, conducting advanced hands-on penetration testing beyond automated tool validation, which will focus on targets that may include network devices, servers, web and mobile apps, web APIs, wireless infrastructures, IoT devices, and other...

  • IT Security Officer

    3 weeks ago


    Hong Kong, Hong Kong SAR China M800 Full time

    Responsibilities ·Develop, enhance and maintain IT security Policies, Guidelines, Procedures ·Conduct risk assessments and make recommendations to meet company's security requirements ·Ensure that previous audit/security recommendations are addressed and implemented ·Identify best practices to meet security requirements ·Perform vulnerability...

  • Security Officer

    4 weeks ago


    Hong Kong, Central and Western District, Hong Kong SAR China Macrotech Security & management Services Limited Full time

    職位:Security...


  • Hong Kong, Hong Kong SAR China AIA Full time

    FIND YOUR 'BETTER' AT Blue Cross If you believe in better, we’d love to hear from you. About the Role Responsible for ensuring the security and integrity of AIA's information systems and cyber environment Duties/Accountabilities Assist information security and cyber security risk assessment on security initiatives, compliance and improvements ...


  • Hong Kong, Hong Kong SAR China Shangri-La Full time

    We are looking for someone who has: Bachelors degree holder, preferably in a relevant discipline Minimum 6 years of relevant experience in managing information security function for a sizable company Hands-on experience in developing and implementing enterprise-level information security policies & procedures, and training Familiar with legal,...


  • Hong Kong, Hong Kong SAR China Wing Lung Bank Ltd. Full time

    Senior Security Engineer Responsibilities Acting as a first line defence on the Information and Cyber security matters Assisting in security solution selection, evaluation and implementation based on the procedures and guidelines of the Bank Performing security operation matters including key management, privileged account management,...

  • Product Analyst

    2 weeks ago


    Hong Kong, Hong Kong SAR China HSBC Full time

    Some careers have more impact than others. If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further. Securities...


  • Hong Kong, Hong Kong SAR China China Investment Information Services Limited Full time

    Job Responsibilities ▪ Working with teammates to perform day-to-day internal operational duties regarding networking and network security issues ▪ Working closely with vendors and internal stakeholders on IT network project development, implementation and testing ▪ Support security framework to fulfill different security compliance guideline ...


  • Hong Kong, Hong Kong SAR China Crypto.com Full time

    The Cybersecurity and Data Privacy team reports directly under the office of the CISO headed by Chief Information Security Officer (CISO) Jason Lau () who has over 23+ years of experience in the cybersecurity space, awarded Global Top 100 CISO, and also serves on the World Economic Forum, International Association of Privacy Professionals and more. The team...


  • Hong Kong, Hong Kong SAR China Crypto.com Full time

    The Cybersecurity and Data Privacy team reports directly under the office of the CISO headed by Chief Information Security Officer (CISO) Jason Lau () who has over 23+ years of experience in the cybersecurity space, awarded Global Top 100 CISO, and also serves on the World Economic Forum, International Association of Privacy Professionals and more. The team...

  • Security Officer

    3 weeks ago


    Hong Kong, Hong Kong SAR China The Peninsula Hong Kong Full time

    We are looking for talented applicants with enthusiasm, passion, positive service attitude and outstanding interpersonal and communications skills to fill this exciting position. 17 paid statutory holidays Exceptional market leading benefits Option of MPF or ORSO retirement scheme Key Accountabilities: Provides asset protection and loss...


  • Hong Kong, Hong Kong SAR China Crypto.com Full time

    The Cybersecurity and Data Privacy team reports directly under the office of the CISO headed by Chief Information Security Officer (CISO) Jason Lau () who has over 23+ years of experience in the cybersecurity space, awarded Global Top 100 CISO, and also serves on the World Economic Forum, International Association of Privacy Professionals and more. The team...


  • Hong Kong, Hong Kong SAR China City University of Hong Kong Full time

    Duties Assist in Centralised Firewall Management Platform Implementation (Tufin); Manage Network Segmentation Project and assist in large-scale firewall implementations; Review the Domain Name Services and records, and build necessary lifecycle management mechanism; Build intelligence in SIEM to identify threats from the reports provided by the...

  • Business Analyst

    19 hours ago


    Hong Kong, Hong Kong SAR China TEKsystems Full time

    Job Summary Job Highlights - Business Analyst - Global Luxury Retail Company - Work-life balance - WFH Job Description Our client, a leading luxury retail company, is looking for a Senior Business Analyst to join their mobile team to work on one of their mobile applications for APAC. They are looking at ways in which they can improve their processes...


  • Hong Kong, Central and Western District, Hong Kong SAR China Macrotech Security & management Services Limited Full time

    職位: Quarry Bay Office Security Officer(1名)工作職責.. 負責監控室辦公室相關工作工作類型: 全職薪酬: 每月$18000福利 :醫療福利、年假7日起、勞工假14日.工作時間:12小時 每周休息一天,一小時用膳,半小時小休)工作經驗: 至少一年相關經驗語言:流利廣東話,一般英語及普通話...


  • Hong Kong, Central and Western District, Hong Kong SAR China Mercer Full time

    We will rely on you to:As Senior Consulting Analyst, you will write and structure client presentations/reports which typically require a high level of customization. Perform data analysis using advanced dynamic Excel modelling. Draws conclusions from the data for project managers' and senior consultants' review. Review and/or develop exhibits based on...