Mandarin Speaking Information Security Manager

Salary: £36,000 - 72,000 per year

• We require fluent Mandarin and English, with excellent verbal and written communication and presentation skills in both languages.
• We require working experience in Information Security, Cyber Security, Network Security, or IT Risk Management, preferably within financial services.
• We require a Masters degree or above in Information Security, Computer Science, Information Technology, or a related discipline.
• We highly value professional certifications such as CCIE, HCIE, CISSP, CISM, CISA, or ISO
  27001 Lead Implementer.
• We prefer candidates with experience developing and implementing information security governance frameworks.
• We expect a strong understanding of information security standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, or CIS Controls.
• We expect good knowledge of UK regulatory expectations related to cyber security, operational resilience, and outsourcing risk.
• We expect understanding of banking IT environments, including networks, applications, and infrastructure security.
• We value strong analytical and risk assessment skills.
• We need the ability to communicate effectively with technical teams and senior management.
• We need the ability to coordinate incident response and cross-departmental collaboration.
• We expect a high level of integrity, professionalism, risk awareness, and sense of responsibility.
• We need the ability to work effectively in a regulated banking environment.

• We establish, maintain, and improve our information security framework to protect the confidentiality, integrity, and availability of information assets, particularly for our London Branch.
• We develop and oversee security policies, strategies, and controls in line with internal governance, UK regulatory requirements, and industry best practices.
• We operate as a 1.5 Line of Defence within the IT function, providing independent security risk oversight and challenging the effectiveness of IT security controls.
• We support regulatory compliance and operational resilience.
• We upgrade and maintain our information security policies, standards, and procedures in line with Head Office policies and regulatory requirements.
• We maintain an effective information security governance framework within the Branch.
• We ensure information security policies and procedures are properly implemented and periodically reviewed.
• We identify, assess, and monitor information security risks affecting the Branch.
• We maintain the information security risk register and ensure appropriate mitigation measures are implemented.
• We provide information security risk reporting to senior management.
• We provide oversight and challenge to the implementation of information security controls performed by the IT team.
• We monitor the effectiveness of technical and procedural security controls across systems, infrastructure, and applications.
• We coordinate periodic security reviews and internal control assessments.
• We oversee cyber security measures including vulnerability management, access control, security monitoring, and incident detection.
• We ensure regular vulnerability assessments, security reviews, and penetration testing are conducted.
• We establish and maintain procedures for managing information security incidents.
• We coordinate investigation, response, and reporting of cyber security incidents.
• We support our operational resilience framework from an information security perspective.
• We participate in disaster recovery planning, cyber security exercises, and resilience testing.
• We assess information security risks associated with third-party service providers and outsourcing arrangements.
• We ensure information security requirements are incorporated into vendor management and outsourcing governance processes.
• We ensure compliance with applicable UK regulatory expectations relating to information security, cyber risk, and operational resilience.
• We support regulatory reviews, internal audit, and external audit activities.
• We promote information security awareness across the Branch.
• We organise information security training and awareness programmes for staff.
• We perform any other duties as required by the line manager or Senior Management.

• Support
• Network
• Security

We are recruiting for a Mandarin speaking Information Security Manager for our Central London branch on a permanent, office-based basis. This is a competitive role depending on experience and sits within our banking environment. The position supports…