IT Security Manager (Information Security) - Bank of China, Sydney CBD

This is aTwo-Year Maximum Term Contractsubject to review for an on-going basis after the contract period.

The Main Responsibilities will include:

- Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
- Ensure IT operations conform to relevant information security policies, standards and procedures
- Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
- Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
- Investigate security events to determine malfunctions, breaches and remediation steps
- Develop and deliver education and training programs on information security for bank staff
- Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
- Ad hoc duties assigned by department heads/team leaders.

This is aTwo-Year Maximum Term Contractsubject to review for an on-going basis after the contract period.

The Main Responsibilities will include:

- Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
- Ensure IT operations conform to relevant information security policies, standards and procedures
- Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks




- Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
- Investigate security events to determine malfunctions, breaches and remediation steps
- Develop and deliver education and training programs on information security for bank staff
- Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
- Ad hoc duties assigned by department heads/team leaders.

Knowledge/Skills:

- Skills and knowledge in IT risk, information security, Cyber security incident response or equivalent, preferably within a financial organisation
- Good understanding and experience of information security best practice standards and guidelines (e.g. CISA, CISM, CISSP, ISO27000 series standards)
- Experience of information security incident analysis, triage and response techniques
- Valuable understanding on IT risk governance framework and management
- Sound knowledge of and experience with technologies used to respond to threats essential - e.g. SIEM / Log management tools, endpoint and network security management tools
- Demonstrated experience in endpoint analysis
- Knowledge and experience inperforming malware analyses
- Excellent communication and documentation skills.

Requirements:

- Minimum 2 years of experience in information security
- Bachelor degrees in Information Technology or related
- Possession of CISSP, CISM, CISA, CRISC is preferable
- Excellent verbal and written language ability in both English and Mandarin.

Candidates must have must have PR or NZ/Australian Citizenship to be considered.

Closing date for applications:19August2026

#J-18808-Ljbffr

📌 IT Security Manager (Information Security) - Bank of China, Sydney CBD (New South Wales)
🏢 Bank Of China
📍 New South Wales