manager, information security.

This is a group-level strategic position, developing company-wide policies and procedures (PCI-DSS, data privacy laws etc.), leading IT system and vendor audit, providing strategic guidance on new projects and budget management as well as managing a small, specialist team.

About the job

• Develop and maintain information security policies, ensuring compliance with regulations and privacy laws
• Lead security assessments and audits across IT systems, vendors, and other operations
• Manage incident response and security operations in collaboration with SOC
• Oversee PCI-DSS compliance and certification process
• Drive security awareness programs and training across the organisation
• Provide security guidance for new projects and systems, including risk assessment and controls

Skills and experience required

• Relevant qualification in information security, computer science, information technology or similar
• 5+ years experience managing information security at a group level within a large company
• Experience in meeting compliance requirements such as PCI-DSS, familiar with risk management methodologies
• Strong communication and presentation skills in English and ideally Mandarin
• Certifications such as CISA, CISSP, CISM etc are desirable