Technical Manager, Data Security & Protection

The Department

The Cyber Security Department is responsible for the enhancement of the resiliency of Club's information, information systems and network infrastructure, as well as identifying security threats and vulnerabilities and effectively manage the risks. The team also works to ensure the Club's conformance to local cyber laws and regulations.

The Job

You will:

• Work alongside the IT and business stakeholders to ensure effective DLP policies are implemented to minimise the risk of data loss
• Design and implement the DLP policies consistently across the following communicational channels – email, web, endpoint, chat, etc.
• Operate and maintain the Certificate Management platform and its supporting components (incl. internal PKI) and templates
• Detect the use of unsanctioned SaaS applications within the Club, and implement measures to minimise the risk of data loss
• Identify and assess the applicability criteria for SaaS applications, to be onboarded to CASB and perform the onboarding activities
• Continuously identify and assess channels and mediums where data can potentially leave the network, and ensure appropriate controls are applied to mitigate that
• Work with our Cyber Awareness & Training Team to promote awareness across the Club on the fundamentals and the importance of adherence to the Club’s data security & protection requirements particularly to each departmental coordinator and management
• Reference and support the Club’s Information Classification and Handling Standard across departments through guidance, technological controls and policy enforcement

About You

You should have:

• Degree in Computer Science, Information Security, and/or related discipline
• Operational working experience in the Data Security & Protection domain across one or more disciplines
• Strong experience covering Data Security & Protection services and required operating procedures
• Strong service and customer-focused approach to the service being delivered
• Excellent interpersonal, collaborative and communication skills
• Well-disciplined with exemplary professional competence and integrity
• Experience with the following services and technologies – DLP, Data Encryption, Cloud Access Security Broker, Information Protection, Certificate Management
• Industry-recognised certification in one or more of the following – CISSP, CISM, etc. would be an added advantage

Terms of Employment

The level of appointment will be commensurate with qualification and experience.

Enquiries

We are an equal opportunity employer. Personal data provided by job applicants will be used strictly in accordance with the Club's notice to employees and prospective employees relating to the Personal Data (Privacy) Ordinance. A copy of which will be provided immediately upon request.