To support business growth in the organization, we are looking for future leads to join us in the transformation journey and their career will be developed to become an IT partner with the business functions.
About Your Role:
- Provide governance and support over ISO27001 and Group policies in the Asia Pacific Region
- Liaise with headquarters and sales companies on information security policies and standards
- Assist in developing security policies, standards and processes
- Conduct security risk assessment or compliance check for IT systems and projects to identify security gaps.
- Perform system vulnerability assessment and recommend remedial actions
- Monitor and assess the latest security threats and provide action plans to mitigate security risks
- Coordinate security incident response, handling and investigation process
- Promote information security awareness across the region
Does it sound like you?
- Degree holder
- 5 years working experience in information security management, governance or internal audit in sizable organizations
- Knowledge and good understanding of ISO 27001, COBIT or ITIL standards
- Experience in internal audit is an advantage
- Professional certification in information security is preferable (e.g. CISA, CISM, CRISC or CIA)
- Excellent interpersonal skills preferably with regional experience
- Proficient command of spoken and written English and Chinese
- Travel to Asia Pacific countries
Great People. Great Benefits:
- Progressive career advancement opportunities
- Continuous learning & development academy
- Wellness program
- Work-life coaching program
- Volunteer Work recognition
We offer 5-day work, attractive remuneration and benefits package to the right candidate.
Interested parties please forward your full resume (in Microsoft Word or PDF format) with current and expect salary to the Human Resources & Facilities Services, Ricoh Asia Pacific Operations Limited, by clicking human.resources@ricoh.com.hk.
Information provided will be treated in strict confidence and only be used for recruitment related purposes. All personal data of unsuccessful candidates will be destroyed on completion of the recruitment exercise.