Information Security Consultant (Cybersecurity)

TL;DR

Information Security Consultant (Cybersecurity): Strengthening information security governance, risk management, and regulatory compliance across China and Hong Kong business units with an accent on identifying control gaps and driving remediation. Focus on performing comprehensive cloud, third-party, and application security assessments and coordinating IT security incident response.

Location: Hybrid in Hong Kong

Company

A global insurance corporation dedicated to protecting customers and the planet through an innovative and optimistic approach.

What you will do

• Strengthen security governance and risk management across China and Hong Kong business units.
• Identify control gaps and drive remediation activities with business and IT stakeholders.
• Conduct security assessments for cloud, third-party vendors, and IT applications.
• Ensure regulatory compliance with local laws, PCI, GL20, PIPL, and CBDT.
• Coordinate incident response activities and implement recommendations from the Cyber Threat Intelligence team.
• Lead security awareness and education programs to enhance cyber resilience.

Requirements

• Bachelor's degree and minimum 6 years of experience in information security.
• English: C1 level (Excellent command).
• Chinese: C1 level (Fluent written), Cantonese: B1 level (Conversational), Mandarin: B1 level (Basic/Business).
• Strong knowledge of security architectures, compliance controls, and OS platforms.
• Understanding of SDLC, networking, databases, and disaster recovery processes.
• Ability to apply AI solutions to innovate daily workflows.

Nice to have

• Professional certifications: CISSP, CISA, or CISM.

Culture & Benefits

• Inclusive environment that values uniqueness and challenges the status quo.
• Focus on sustainability and social responsibility.
• Collaborative atmosphere across multiple geographic locations.
• Optimistic corporate culture focused on "what can go right".