IT Compliance Manager

Job Responsibilities:

Cybersecurity Operations and Defense

· Oversee daily network security operations for the branch, Lead the collection and analysis ofcyber threat intelligence, coordinate regular vulnerability scanning, penetration testing, and patch management to ensure the security hardening of infrastructure and application systems.

IT Outsourcing Risk Management

· Participate in IT outsourcing risk assessments, conducting due diligence, access reviews, and regular on-site inspections for key IT outsourcing vendors.

First Line of Defense Self-Assessment and Remediation

· Participating in self-assessments, collaborate with the Second Line (Risk Management) and Third Line (Internal Audit) departments, and jointly strengthen the internal control system.

Regulatory Compliance and Gap Analysis

· Participate incompliance assessments for the Technology Risk Management Framework (TRMG) and local regulatory requirements

IT Risk Identification, Assessment, and Quantification

· Participate in collect, review, and report IT risk quantification data required to support management decision-making.

Job Requirements

· Bachelor’s degree or above in Computer Science, Information Security, Software Engineering, or related majors.

· Candidates holding relevant professional certifications are preferred, such as CISSP,CISM, CISA, ISO27001 Lead Auditor, OSCP, etc.

· Possess excellent written and verbal communication skills in English

· Proficiency inwritten and spoken Mandarin is required, as the role involves viewing Head Office policies and documents prepared in Chinese, drafting bilingual correspondence where required, and liaising regularly with Head Office.

· Have a strong interest in cybersecurity operations, IT risk governance, IT audit, and regulatory compliance, with a desire for long-term development in the field of IT risk management.

· Preference will be given to candidates with practical experience in cybersecurity (such as SOC operations, penetration testing, incident response) or IT audit backgrounds.

· Familiar with local regulatory requirements and industry best practices

· Familiar with common types of cybersecurity threats and defense technologies, and understand the working principles and configuration logic of mainstream security tools.

· Possess meticulous review capabilities to accurately assess the quality and compliance of IT policies, processes, reports, and audit responses.

· Possess outstanding time management skills and a results-oriented mindset, maintaining high efficiency and ensuring delivery quality in a fast-paced, high-demand environment.

· Demonstrate strong stress resistance and maintain stable performance during emergency security incidents or regulatory inspections.