IT Security Manager (Information Security) - Bank of China, Sydney CBD

This is a Two-Year Maximum Term Contract subject to review for an on-going basis after the contract period.

The Main Responsibilities will include:

• Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
• Ensure IT operations conform to relevant information security policies, standards and procedures
• Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
• Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
• Investigate security events to determine malfunctions, breaches and remediation steps
• Develop and deliver education and training programs on information security for bank staff
• Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
• Ad hoc duties assigned by department heads/team leaders.
  

Knowledge/Skills:

• Skills and knowledge in IT risk, information security, Cyber security incident response or equivalent, preferably within a financial organisation
• Good understanding and experience of information security best practice standards and guidelines (e.g. CISA, CISM, CISSP, ISO27000 series standards)
• Experience of information security incident analysis, triage and response techniques
• Good understanding on IT risk governance framework and management
• Sound knowledge of and experience with technologies used to respond to threats essential - e.g. SIEM / Log management tools, endpoint and network security management tools
• Demonstrated experience in endpoint analysis
• Knowledge and experience inperforming malware analyses
• Excellent communication and documentation skills.
  

Requirements:

• Minimum 2 years of experience in information security
• Bachelor degrees in Information Technology or related
• Possession of CISSP, CISM, CISA, CRISC is preferable
• Excellent verbal and written language ability in both English and Mandarin.

Candidates must have must have PR or NZ/ Australian Citizenship to be considered.
Closing date for applications: 19 August 2026