Assistant Manager (IT Governance and Security) (Ref: AM-ITGOVSEC)
Description
At Sino Group, we bring people together for a better future. We value your uniqueness, commit to your career development and prioritize your wellness. We provide an inclusive and collaborative workplace, all-round training and work-life balance to unleash your full potential and empower you to grow together with the Group, both personally and professionally.
We are looking for talented people to be part of our dynamic team!
Responsibilities
The successful candidate will report to the Lead of Governance & Security in the Information Technology Department and support the Group’s IT governance and information security functions.
The successful candidate will help maintain and enforce IT policies and standards, implement and monitor security controls, manage security risks and compliance requirements, and support the continuous improvement of the security architecture across Microsoft 365, cloud and on-premises environments.
He / She will assist in overseeing the outsourced Security Operations Centre (SOC), reviewing security events, coordinating incident response, conducting security awareness activities, and preparing risk and status reports for management. The role will also work with risk owners and auditors to ensure that security and audit findings are properly remediated.
The successful candidate will support security initiatives including identity and privileged access management (IAM, PAM and PIM), Zero Trust, SASE, Data Loss Prevention (DLP), vulnerability management, penetration testing, cloud security and incident response.
Requirements
University Degree in IT or a related discipline. At least 5 years of solid experience in Information Security, IT Governance, Internal Control or Operational Risk.
Solid knowledge of IT security best practices, security technologies, secure architectures and emerging security threats.
Knowledge of security and governance frameworks such as ISO 27001, NIST CSF, CIS Controls, COBIT, OWASP Top 10 and ITIL.
Experience in key security domains, including identity and access management, privileged access management (PAM/PIM), risk management, vulnerability and patch management, incident response, user awareness and phishing simulation.
Experience in Microsoft 365 and cloud security, including Microsoft Entra ID, Azure and AWS. Knowledge of Microsoft Defender, Sentinel, Purview, DLP, SASE or other modern security solutions.
Knowledge and experience in AI security and governance, including Generative AI, Microsoft 365 Copilot, Agent 365 or similar AI solutions, will be an advantage.
Able to work with business and technical teams, service providers, risk owners and auditors on security, regulatory and compliance matters.
Professional qualifications such as CISA, CISM, CISSP, CCSP or ISO 27001 certification will be an advantage.
A good team player who is meticulous and possesses strong analytical, problem-solving, interpersonal and communication skills
Good written and spoken Chinese and English
We are an equal opportunity employer who offer an inclusive and diverse workplace where people are valued and respected.
Before submitting your application, please read the Personal Data (Privacy) Policy and Personal Information Collection Statement at our Company website. Information provided will be treated in strict confidence and used for recruitment purposes only. If we have not contacted you within 4 weeks after your submission, you may consider your application unsuccessful.