Responsibilities Monitor and follow up with IT teams for any non-compliance issues. Provide practical advice and coordinate plans for remediation/ mitigation of risks and exposure; review remediation results Coordinate internal and external audit work over IT operations and processes; liaise with IT teams in gathering documents and testing related IT controls during audit reviews Execute internal compliance review to identify IT risks and potential security threats. Report activities toward continuous improvement. Initiate IT security related project/ product evaluation for improvement Provide end-to-end system support and on-going improvement for different security tools including upgrade and maintenance Coordinate with US partners and local IT teams to handle security related projects Prepare various security reports for IT teams and management. Participate in researching and implementing the latest technology Assist in investigating reported security case and follow up with users for any non-compliance issues and coordinate plans for remediation/ mitigation of risks and exposure Requirements Bachelor's degree in computer science, Information Technology, Information Systems or related disciplines Min. of 3 years working experience in information security, IT auditing or consultancy, preferable in a multinational firm Certificate in CISA, CISSP, or equivalent is a must Solid experience in system, network and/or security infrastructure management Knowledge of IT security management such as ISO 27001, IT audit/ compliance including Sarbanes-Oxley and/or SSAE21, industrial best practices e.g. COBIT, and PCI DSS is a plus Strong interpersonal skills, detail-minded and pro-active to solve problems and work independently Proficient in both Chinese and English Self-motivated, analytical and a good problem solver Able to adopt technology changes HKProfessional #LI-AI1