Position Description
This role of Data and Cyber Security Governance Lead, IT Security based out Hong Kong, to lead and manage data and cybersecurity governance initiatives & projects.
Key Areas of Responsibilities
- Revise the organization’s cyber security and data security framework, policies, standards, and procedures for cybersecurity and data handling
- Establish, implement, and enforce a comprehensive governance framework that aligns with organization’s policies defining data management, data lifecycle, data protection and data leakage protection
- Ensure infrastructure, systems and applications adhere to laws, regulations and best industry standards (e.g., GDPR, MAS, ISO 27001, NIST, Data Protection laws in China)
- Maintain audit readiness and respond to compliance assessments, audit inquiries, client questionnaires, and regulator’s requests
- Identify, assess, and prioritize cyber risks to the organization. Build an effective cybersecurity and data management framework and deploy it
- Establish governance to organization's vulnerability management program with Application and Platform teams
- Provide regular reports and dashboards on cybersecurity governance and compliance status
- Ensure full compliance to all company policies, required training and regulatory requirements
- Establish a cloud governance framework to manage CSI’s multi cloud strategy involving AWS, Azure, and Alibaba Cloud
- Assist to manage IT security portfolio at Citic Securities Intl
Requirements
- Bachelor’s degree or higher, in Computer Science or Software Engineering
- 10+ years of overall IT experience, with minimum 5 years in ServiceNow CMDB implementation and management
- Hands-on expertise in ITSM, ITOM, HAM, and SAM modules
- Strong knowledge of ServiceNow Discovery, Service Mapping, I&R, and CSDM.
- Experience integrating CMDB with AWS and Azure cloud environments.
- Proficiency in JavaScript, REST/SOAP APIs, and MID Server configuration.
- Relevant ServiceNow certifications (CIS – Discovery, CIS – Service Mapping, CSDM Practitioner, CSA/CAD) are mandatory
- Experience with governance and compliance in financial services.
- Familiarity with automation for CMDB health remediation
- Fluent in both spoken and written English. Fluency in spoken and written Mandarin is an advantage
- Excellent stakeholder management and communication skills
