POSITION SUMMARY

As a member of the IT Strategy and Governance team, the Assistant Manager - Strategy & Governance is responsible for assisting the enterprise architecture review, measure and monitoring of IT risk and compliance in order to protect of GEG's information assets. He/she will work under the supervision and guidance from the Manager to provide support to the development, management and implementation of corporate-wide information security controls.

PRIMARY RESPONSIBILITIES

> Assist in design and review the enterprise architecture aligned with IT standard and governance framework
> Provide coordination support for on-going internal/external audits activities including government regulation
> Provide support for information security systems and programs including data protection, risk management and compliance
> Assist in managing remediation planning and implementation status in conjunction with audit findings
> Assist in providing continuous improvements to strengthen the efficiency of internal process and controls.
> Assist in development and maintain IT policies guidelines and standard operation procedures
> Assist in building and maintain sustainable relationships with IS&T teams to ensure the security controls are properly understood and implemented.
> Assist in building and promoting Information Security training and Awareness Programme.
> Coach junior team members and transfer necessary skills to them for further career development.

REQUIREMENTS

Bachelor's degree in computer science, computer engineering, systems analysis, or a related study, or equivalent experience.
4 or more years of experience in not less than one IT discipline including, but not limited to; application support, application development, data analysis, data center, servers and storage, networking, middleware, database management, IT operations, etc.
Excellent written and verbal communication skills with a strong ability to communicate in English. The ability to communicate in Cantonese and/or Mandarin will be an advantage.
Strong planning and organizational skills.
Strong interpersonal skills, including teamwork, facilitation and negotiation.
Good leadership skills.
Strong analytical and technical skills.
Strong ability to translate business needs into technical requirements.
Strong problem solving skills.
Strong customer service skills.
Good knowledge of financial models and budgeting.
Good ability to tactfully and positively manage and maintain business relationships.
Have at least 2 years of experiences in information security management domains.
CISSP or CISM, CRISC or CISA certifications is an added advantage.