Information Security Officer - Mandarin Speaking

Reporting to the Senior Information Security Manager, the Information Security Officer for Asia will play a key role in maintaining the firm's ISO 27001 certification across its offices in Asia (Hong Kong and Beijing). This is a new role, based in London, that will primarily be responsible for the day-to-day management, administration and continual improvement of the Asia Information Security Management System (ISMS).

This is a hands-on individual contributor role, requiring a strong understanding of the ISO 27001 standard and the ability to work independently, building strong relationships with stakeholders across both Europe and Asia offices. The role will help ensure that information security practices in Asia remain aligned with both the firm's global standards and applicable local regulatory requirements.

The role will also provide security oversight and guidance for projects, technology changes, and operational activities across the firm's Asia offices, ensuring that information security risks are managed effectively. A strong background in information security Governance, Risk and Compliance (GRC) is essential.

The role requires fluency in both English and Mandarin, with Cantonese considered beneficial. Occasional travel to Hong Kong and Beijing will be required, typically two to four trips per year, each lasting several days. Given the requirement to collaborate regularly with colleagues across Asia, some flexibility in working hours is desirable, for example 8:00am to 4:00pm UK time.

Key responsibilities

The key responsibilities of this role are set out below and there may be others which are not listed. You may be required on occasion to work outside our normal working hours of 9:30am to 5:30pm.

• Manage the day-to-day operations of the firm’s Asia ISMS by:
• Maintaining policies such that they align with the firm’s global standards but reflect local variations in both the regulatory landscape and working practice.
• Maintain and continuously improve risk, incident and exceptions registers.
• Track relevant metrics against ISMS objects and produce management review reports for Steering Group meetings.
• Coordinate and facilitate internal and external ISO 27001 audits for the Hong Kong and Beijing offices, managing audit schedules, stakeholder engagement, and the completion of audit deliverables.
• Coordinate with relevant Business Services teams and stakeholders to develop, implement, and monitor remediation plans for audit findings, and drive continuous improvement.
• Collaborate with the wider Information Security and Privacy (ISP) team to support the delivery of information security awareness and training programmes, promoting a strong security culture across the Hong Kong and Beijing offices.
• Provide advice and support to the Hong Kong and Beijing offices, as their primary information security representative.

Candidate profile

Candidates for this position must have:

• Strong working knowledge of ISO 27001, e.g. ISO 27001 Lead Implementer or Lead Auditor.
• Prior experience in an information security or GRC role, ideally within a regulated environment or an organisation aligned to ISO 27001.
• A self-motivated, results-driven mindset with a strong sense of ownership and accountability.
• Excellent organisational skills, with the ability to prioritise effectively in a fast-paced environment.
• Proven ability to collaborate effectively, build strong professional relationships, and communicate confidently with senior leadership.
• Fluent in both English and Mandarin. Cantonese speaking beneficial.
• Ability and willingness to travel to Hong Kong and Beijing, typically two to four trips per year

We are committed to ensuring that our recruitment processes are barrier-free and as inclusive as possible for everyone. This includes making adjustments for people who have a disability or long-term condition. If you have any questions or require any adjustments to be made to one or both of the application or interview processes, please contact the Recruitment Team.

We are a Disability Confident Committed employer and will offer an interview to applicants with a disability or long-term condition who best meet the minimum or essential criteria for our Business Services roles. If you are disabled under the Equality Act 2010 if you have a physical or mental impairment that has a ‘substantial’ and ‘long-term’ negative effect on your ability to do normal daily activities. For more information about the Disability Confident scheme, please see the government website here.

We welcome applications irrespective of race, colour, ethnic or national origin, disability, sex, gender identity, sexual orientation, age, religion, belief or marital status.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →