Outline of the position:

Within the CIO Department, the Information Security Officer (ISO) participates in the implementation, coordination, and monitoring of information security for the CA Indosuez Switzerland (CAIS) for Asian entities based in Hong-Kong and Singapore. He/she will also act as backup of the Asia IT Officer based in Singapore. The ISO reports hierarchically to the Head of Information Systems Security (CISO) based in Switzerland.

 Key Responsibilities:

• Implement and monitor the information security program to ensure the integrity, confidentiality and availability of data.
• Coordinate with Head Office for the implementation of Group Information Security initiatives in Hong Kong.
• Document and maintain information security, data governance and business continuity.
• Manage, investigate, coordinate and report security incidents.
• Partner with Asia and Head Office stakeholders to oversee vendor information security risk and periodic review of third-party service providers’ information security and business continuity controls.
• Ensure the follow-up of operational security implementation plans within the various entities and participate in the security risk assessment of different projects.
• Operate second line of defense security controls and follow-up with action plan.
• Provide regular and consistent reporting on the status of information security program to Asia and Head Office stakeholders and management.
• Coordinate and participate to internal and external audits and examinations related to Information Security.
• Oversee, implement and test effective business continuity and disaster recovery policies and standards to align with Group business continuity program goals and regulatory requirements.
• Advise, raise awareness, and assist employees, project managers, and operational stakeholders on security-related issues.
• Coordinate with IT Officer in Singapore for all IT related topics
• Act as backup of IT Officer based in Singapore.

Degree in Information Systems

 More than 8 years’ experience in banking or similar work experience

• Team player
• Strong ability to analyze and solve problems
• Ability to prioritize and to manage multiple projects in parallel
• Dynamic, proactive, autonomous, flexible
• Creativity and initiative, openness
• Autonomy and adaptability

• Extensive knowledge of information security, regulations and industry best practices
• Certification in information security (CSX, CISA, CISSP…)
• Experience in information security risk assessment and audit
• General IT knowledge