Assistant Manager - IS&T Governance

Position Summary

As a member of the IS&T Planning & Governance team, the Assistant Manager is responsible for assisting to measure and monitoring of IT risk and compliance in order to protect of GEG's information assets. He/she will work under the supervision and guidance from the Manager to provide support to the development, management and implementation of corporate-wide information security controls.

Primary Responsibility

• • Assist in design and review the relevant governance & compliance areas in the IS&T Solution Assessment (ISA) process to ensure the alignment with IT standard, governance framework, policies and regulatory requirements.
• • Provide coordination support for on-going internal/external audits activities including government regulation
• • Provide support for information security systems and programs including data protection, risk management and compliance
• • Assist in managing remediation planning and implementation status in conjunction with audit findings
• • Assist in providing  continuous improvements to strengthen the efficiency of internal process and controls.
• • Assist in development and maintain IT policies guidelines and standard operation procedures
• • Assist in building and maintain sustainable relationships with IS&T teams to ensure the security controls are properly understood and implemented.
• •  Assist in building and promoting Information Security training and Awareness Programme.
• • Assist in building automated solutions to expedite the lifecycle of internal and external audit processes end-to-end.
• • Conduct reviews and compliance checks for IT processes to ensure compliance and effectiveness.
• • Coordinate with various IS&T departments to integrate IT governance practices into daily operations.
• • Coach junior team members and transfer necessary skills to them for further career development.

Requirements

• • Bachelor's degree in computer science, computer engineering, systems analysis, or a related study, or equivalent experience.
• • 4 or more years of experience in not less than one IT discipline including, but not limited to; application support, application development, data analysis, data center, servers and storage, networking, middleware, database management, IT operations, etc.
• • Excellent written and verbal communication skills with a strong ability to communicate in English.  The ability to communicate in Cantonese and/or Mandarin will be an advantage.
• • Strong planning and organizational skills.
• • Strong interpersonal skills, including teamwork, facilitation and negotiation.
• • Good leadership skills.
• • Strong analytical and technical skills.
• • Strong ability to translate business needs into technical requirements.
• • Strong problem solving skills.
• • Strong customer service skills.
• • Good knowledge of financial models and budgeting.
• • Good ability to tactfully and positively manage and maintain business relationships.
• • Minimum 2 years of experiences in information security management domains.
• • CISSP or CISM, CRISC or CISA certifications is an added advantage.