IT Security Manager (Information Security) - Bank of China, Sydney CBD
This is a
Two-Year Maximum Term Contract
subject to review for an on-going basis after the contract period.
The Main Responsibilities will include:
Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
Ensure IT operations conform to relevant information security policies, standards and procedures
Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
Investigate security events to determine malfunctions, breaches and remediation steps
Develop and deliver education and training programs on information security for bank staff
Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
Ad hoc duties assigned by department heads/team leaders.
This is a
Two-Year Maximum Term Contract
subject to review for an on-going basis after the contract period.
The Main Responsibilities will include:
Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
Ensure IT operations conform to relevant information security policies, standards and procedures
Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks




Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
Investigate security events to determine malfunctions, breaches and remediation steps
Develop and deliver education and training programs on information security for bank staff
Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
Ad hoc duties assigned by department heads/team leaders.
Knowledge/Skills:
Skills and knowledge in IT risk, information security, Cyber security incident response or equivalent, preferably within a financial organisation
Good understanding and experience of information security best practice standards and guidelines (e.g. CISA, CISM, CISSP, ISO***** series standards)
Experience of information security incident analysis, triage and response techniques
Positive understanding on IT risk governance framework and management
Sound knowledge of and experience with technologies used to respond to threats essential - e.g. SIEM / Log management tools, endpoint and network security management tools
Demonstrated experience in endpoint analysis
Knowledge and experience inperforming malware analyses
Excellent communication and documentation skills.
Requirements:
Minimum 2 years of experience in information security
Bachelor degrees in Information Technology or related
Possession of CISSP, CISM, CISA, CRISC is preferable
Excellent verbal and written language ability in both English and Mandarin.
Candidates must have must have PR or NZ/Australian Citizenship to be considered.
Closing date for applications:19August
****
#J-*****-Ljbffr

📌 It Security Manager (Information Security) - Bank Of China, Sydney Cbd (New South Wales)
🏢 Bank Of China
📍 New South Wales