Job Description

IT Security Manager (Information Security) - Bank of China, Sydney CBD

n

This is aTwo-Year Maximum Term Contractsubject to review for an on-going basis after the contract period.

n

The Main Responsibilities will include:

n

n
- Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
n
- Ensure IT operations conform to relevant information security policies, standards and procedures
n
- Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
n
- Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
n
- Investigate security events to determine malfunctions, breaches and remediation steps
n
- Develop and deliver education and training programs on information security for bank staff
n
- Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
n
- Ad hoc duties assigned by department heads/team leaders.
n

n

This is aTwo-Year Maximum Term Contractsubject to review for an on-going basis after the contract period.

n

The Main Responsibilities will include:

n

n
- Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
n
- Ensure IT operations conform to relevant information security policies, standards and procedures
n
- Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
n




- Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
n
- Investigate security events to determine malfunctions, breaches and remediation steps
n
- Develop and deliver education and training programs on information security for bank staff
n
- Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
n
- Ad hoc duties assigned by department heads/team leaders.
n

n

Knowledge/Skills:

n

n
- Skills and knowledge in IT risk, information security, Cyber security incident response or equivalent, preferably within a financial organisation
n
- Good understanding and experience of information security best practice standards and guidelines (e.g. CISA, CISM, CISSP, ISO27000 series standards)
n
- Experience of information security incident analysis, triage and response techniques
n
- Positive understanding on IT risk governance framework and management
n
- Sound knowledge of and experience with technologies used to respond to threats essential - e.g. SIEM / Log management tools, endpoint and network security management tools
n
- Demonstrated experience in endpoint analysis
n
- Knowledge and experience inperforming malware analyses
n
- Excellent communication and documentation skills.
n

n

Requirements:

n

n
- Minimum 2 years of experience in information security
n
- Bachelor degrees in Information Technology or related
n
- Possession of CISSP, CISM, CISA, CRISC is preferable
n
- Excellent verbal and written language ability in both English and Mandarin.
n

n

Candidates must have must have PR or NZ/Australian Citizenship to be considered.

n

Closing date for applications:19August2026

n

#J-18808-Ljbffr

📌 IT Security Manager (Information Security) - Bank of China, Sydney CBD (New South Wales)
🏢 Bank Of China
📍 New South Wales