Full job descriptionReporting to the Senior Information Security Manager, this is a hands-on GRC role with responsibility for maintaining ISO 27001 certification, managing security policies and risk registers, coordinating audits and remediation activities, and acting as the key information security contact for the Asia offices.
What you’ll do:
*Manage and continuously improve the Asia ISO 27001 ISMS
*Review and enhance information security policies and governance
*Maintain risk, incident and exception registers
*Coordinate internal and external ISO 27001 audits
*Manage remediation of audit findings and security risks
*Produce ISMS metrics and management reporting
*Provide information security guidance to stakeholders across Hong Kong and Beijing
*Support security awareness and training initiatives
What you’ll bring:
*Strong practical knowledge of ISO 27001
*Information Security / GRC experience
*Experience managing policies, audits, risks and remediation
*Strong stakeholder management and communication skills
*Fluent English and Mandarin - essential
*Comfortable working independently and collaborating across UK/Asia time zones
*Willingness to travel to Hong Kong/ Beijing 2-4 times per year
Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates