---

---

Location

Lawford, Essex | United Kingdom

---

Job description

This is a risk management role predominantly covering Information Security domain and also touches other non-tech domains such as Third Party risk, Privacy risk, Risk and Control framework, Regulatory compliance review and staff awareness. Candidate will be responsible to provide oversight and advisory in risk related matters (including incident management). One of the key task is to co-ordinate with various stakeholders (global/local) for collecting information to prepare MIS/In-Control report on regular basis and present the same to the senior management within COO domain.

Key Responsibilities and Accountabilities:

1. Security Governance

• Implement (& maintain) Global/Regional Information Security Policies, Processes & Procedures.
• Design and deliver security training and awareness activities within the Asian offices
• Maintain the Asia Security Repository

2. Systems Security Risk and Compliance Management

• Support security risk assessments (system, vendor, infra, DNB, other)
• Advise and support creation of security action plans
• Support internal/external and regulatory audit requests
• Monitor and provide regular reporting on security risk and compliance (e.g. KRI, KPI, Global Cybersecurity Risk, SLA Reporting, etc.)

3. Security Advisory/Approval

• Validation role in Operational processes (e.g. Change Controls/Change Management Process, Firewall Rule Reviews, Data Extraction requests, Requirements Specifications, New Business Checklist, OAT signoffs, etc.)
• Participation in projects; providing security advisory (i.e. definition of technical solutions to specific security requirements; identifying specific security implications; validate functional specifications and technical architecture)

4. Managed Security Services

• Own and maintain SLAs and KPIs provided to other Asian Branches.
• Monitor, track and continual improvement of SLAs.

5. Cyber Security Risk Management

• Implementation and maintenance of Asia Cyber Security Framework
• Manage Cyber Security Risk Assessment and Profiling for Asia branches.
• Conduct Maturity assessment, identify gaps and continual improvement work.

6. Incident Management including Security Incidents

• Play an advisory role to ITOPS team in managing incidents and provide an oversight of incidents on regular basis to the stakeholder.
• Responsible Security Incident Handling Process & Escalation, including Cyber Security Incidents

7. Security Operations Related
a) Vulnerability & Threat Management

• Governance and oversight of vulnerability remedial action plans.
• Coordinate vulnerability assessment and/or penetration tests (including engagement, progress tracking and remedial action tracking)
• Monitor, manage and report on cyber threats.

b) Security Monitoring & Detection

• Provide 1st line monitoring for the DLP tool and conduct investigation.
• Initiate Security Incident where required.

8. Other duties as directed.

Qualifications:

• University degree.
• 6 years of IT Security / IT Risk experiences in the financial service industry
• Hold professional certification such as CISSP, CISA, CISM, CRISC or equivalent
• Office 365 Platform
• Microsoft Power Platform (Power BI, Power Apps, Power Automate)
• Experience with GRC tool such as Archer
• Proficient in use of SharePoint
• Good understanding of technology requirements from Asia regulators such as MAS, HKMA, RBI, and CBRC

Interested candidates may apply directly through this link

Diversity & Inclusion

At Rabobank Asia, we:

Believe a diverse and inclusive workplace is the foundation of our performance.

Embed diversity in everything we do on a daily basis, whether it be our hiring, culture, development opportunities or our policies.

Value differences in our people which is represented in terms of gender identity, age, sexual orientation, religion, ethnicity, disability, background, education, expertise or character.

Embrace people from all walks of life to build a strong, creative, innovative and dynamic workforce that is reflective of the diversity of our community.

Treat everyone equally so that everyone can be themselves, and each individual feels respected and valued on the basis of who they are.

#Rabobank #RabobankAsia

ApplyingIn 5 steps

We'd like to get to know you.

Step 1Applying

Thanks for applying! We consider all the CVs and covering letters that we receive. After the closing date, you will hear from us as soon as possible.

Step 2First interview

Usually you’ll be meeting with your (potential) team leader and an immediate (future) colleague. We are keen to get a sense of whether you are a good fit for the position and our team. And you probably have a lot of questions too.

Step 3Second interview

We want to speak to you a second time. In this online meeting, we will delve deeper into the details of what the job entails. Another colleague will often join the interview too.

Step 4Offer

If you are a good match for us and we’re a good match for you, then you’ll receive a good offer by email. Some positions require you to undergo further assessment first.

Step 5Screening

We assess whether you are trustworthy enough to work for Rabobank in a screening process.

I approve Rabobank to retain my details for 1 year for future applications.

I require a work permit to work in Hong Kong.

I authorize the Bank to collect and use my personal data for recruitment purpose. I understand that such data may be transferred to other Rabobank entities which are invovled in the recruitment and service providers who need the data for employment verification purposes.

HK Declaration on accuracy optional

I declare that information given on this application is true and accurate. I understand that any omission and misrepresentation of any fact may results in failing the application or refusal of employment.

#J-18808-Ljbffr

---

Job tags

---

---

Salary