IT Security Manager (Information Security) - Bank of China, Sydney CBD
This is aTwo-Year Maximum Term Contractsubject to review for an on-going basis after the contract period.
The Main Responsibilities will include:
- Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
- Ensure IT operations conform to relevant information security policies, standards and procedures
- Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
- Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
- Investigate security events to determine malfunctions, breaches and remediation steps
- Develop and deliver education and training programs on information security for bank staff
- Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
- Ad hoc duties assigned by department heads/team leaders.
This is aTwo-Year Maximum Term Contractsubject to review for an on-going basis after the contract period.
The Main Responsibilities will include:
- Develop information security policies, standards and procedures. Ensure that policies are compliant with Head Office's requirements and local regulatory guidelines.
- Ensure IT operations conform to relevant information security policies, standards and procedures
- Develop and implement an ongoing risk assessment and risk control program for IT operations; monitor system activities and detect risks
- Develop and implement an Incident Reporting and Response program to address security incidents and respond to alleged policy violations
- Investigate security events to determine malfunctions, breaches and remediation steps
- Develop and deliver education and training programs on information security for bank staff
- Prepare status reports on security matters to develop security risk analysis scenarios and response procedure
- Ad hoc duties assigned by department heads/team leaders.
Knowledge/Skills:
- Skills and knowledge in IT risk, information security, Cyber security incident response or equivalent, preferably within a financial organisation
- Good understanding and experience of information security best practice standards and guidelines (e.g. CISA, CISM, CISSP, ISO27000 series standards)
- Experience of information security incident analysis, triage and response techniques
- Good understanding on IT risk governance framework and management
- Sound knowledge of and experience with technologies used to respond to threats essential - e.g. SIEM / Log management tools, endpoint and network security management tools
- Demonstrated experience in endpoint analysis
- Knowledge and experience inperforming malware analyses
- Excellent communication and documentation skills.
Requirements:
- Minimum 2 years of experience in information security
- Bachelor degrees in Information Technology or related
- Possession of CISSP, CISM, CISA, CRISC is preferable
- Excellent verbal and written language ability in both English and Mandarin.
Candidates must have must have PR or NZ/Australian Citizenship to be considered.
Closing date for applications:19August2026
IT Security Manager (Information Security) - Bank of China, Sydney CBD employer: Bank of China
As an Assistant Risk Manager (Credit Risk) in our dynamic Credit Risk Management team, you'll thrive in a supportive environment that prioritises professional growth and development. We offer a collaborative work culture where your contributions are valued, alongside competitive benefits and opportunities for advancement within the financial services sector. Located in a vibrant area, our company fosters a strong sense of community and encourages innovative thinking, making it an excellent place to build a meaningful career.
