Reporting to the Senior Information Security Manager, this newly created role will be responsible for managing and continuously improving the Asia Information Security Management System (ISMS) across offices in Hong Kong and Beijing. The position will play a key role in maintaining ISO 27001 certification, supporting governance, risk and compliance activities, and ensuring alignment between local regulatory requirements and global security standards

Client Details

Our client is a leading international professional services firm with a strong global presence and a long-established reputation for delivering complex, high-profile advisory services to multinational organisations.

Description

• Manage the day-to-day operation and continual improvement of the Asia ISMS.
• Maintain information security policies, risk registers, incident registers and exception registers.
• Coordinate ISO 27001 internal and external audits and oversee remediation activities.
• Prepare security metrics and management reports for governance meetings.
• Support information security awareness and training initiatives.
• Act as the primary Information Security representative for stakeholders across Hong Kong and Beijing.
• Provide security oversight and guidance for projects, technology changes and business operations.

Profile

• Strong knowledge of ISO 27001, ideally supported by Lead Implementer or Lead Auditor certification.
• Previous experience within Information Security, Governance, Risk & Compliance (GRC), or a related security discipline.
• Strong stakeholder management and communication skills.
• Fluent English and Mandarin language skills; Cantonese is advantageous.
• Ability to travel to Hong Kong and Beijing several times per year
• With right to work in UK

Job Offer

• Opportunity to travel to Asia 2 -4 times yearly
• Permanent role in the professional services industry.
• Comprehensive benefits