Our client is a leading insurance Company who require an IT Risk & Security Manager to help manage the current security environment as well as a number of internal initiatives. They are currently acquiring Companies within region, which is placing more demands on the Tech Risk and Security teams. The role will focus on governance, process improvement and efficiency within the department. Experience in Big Four Consultancy or IT Audit would be highly beneficial for the role.

Responsibility of the Role

• Participate in internal security assessment and compliance review activities

• Follow up on deficiencies identified and ensure remediation steps are taken

• Look after governance round security and the strategy around that

• Coordinate and review the outcomes of ongoing tests (vulnerability scanning, penetration testing etc), and propose solutions

• Implement policies and procedures to ensure all data compliance

• Implement strong Governance within the department to ensure best practise is being met

• Liaise with internal stakeholders locally and across the region

• Review assessment criteria and third-party proposals

• Support the Head of Information Security on project work

Requirements of the Role

• Degree Educated within a Technology Discipline

• +8 Years of Experience in Technology

• Experience in an IT Security role within an Enterprise Environment

• Experience within a Big 4, with understanding of Risk, Audit would be a good advantage

• Professionally certified (CISSP, CEH, CISM, CompTIA etc) would be advantageous

• Strong knowledge of Security Governance, Documentation

• Experience within IT Audit/Risk is an Advantage

• Experience of Vendor management

• Project Management certification (PMP, Prince2 is an advantage)

• Good stakeholder engagement and management skills

If interested please send your CV in word format to ben@mainstayasia.com