Position Description

This role of Data and Cyber Security Governance Lead, IT Security based out Hong Kong, to lead and manage data and cybersecurity governance initiatives & projects.

Key Areas of Responsibilities

1. Revise the organization’s cyber security and data security framework, policies, standards, and procedures for cybersecurity and data handling
2. Establish, implement, and enforce a comprehensive governance framework that aligns with organization’s policies defining data management, data lifecycle, data protection and data leakage protection
3. Ensure infrastructure, systems and applications adhere to laws, regulations and best industry standards (e.g., GDPR, MAS, ISO 27001, NIST, Data Protection laws in China)
4. Maintain audit readiness and respond to compliance assessments, audit inquiries, client questionnaires, and regulator’s requests
5. Identify, assess, and prioritize cyber risks to the organization. Build an effective cybersecurity and data management framework and deploy it
6. Establish governance to organization's vulnerability management program with Application and Platform teams
7. Provide regular reports and dashboards on cybersecurity governance and compliance status
8. Ensure full compliance to all company policies, required training and regulatory requirements
9. Establish a cloud governance framework to manage CSI’s multi cloud strategy involving AWS, Azure, and Alibaba Cloud
10. Assist to manage IT security portfolio at Citic Securities Intl

Requirements

1. Bachelor’s degree or higher, in Computer Science or Software Engineering
2. 10+ years of overall IT experience, with minimum 5 years in ServiceNow CMDB implementation and management
3. Hands-on expertise in ITSM, ITOM, HAM, and SAM modules
4. Strong knowledge of ServiceNow Discovery, Service Mapping, I&R, and CSDM.
5. Experience integrating CMDB with AWS and Azure cloud environments.
6. Proficiency in JavaScript, REST/SOAP APIs, and MID Server configuration.
7. Relevant ServiceNow certifications (CIS – Discovery, CIS – Service Mapping, CSDM Practitioner, CSA/CAD) are mandatory
8. Experience with governance and compliance in financial services.
9. Familiarity with automation for CMDB health remediation
10. Fluent in both spoken and written English. Fluency in spoken and written Mandarin is an advantage
11. Excellent stakeholder management and communication skills