Title: Information Security Officer

Core Responsibilities

• Manage the information security function in accordance with the established policies and guidelines.
• Establish and maintain information security standards and procedures in compliance with the Company information security and risk management policies, standards and guidelines.
• Establish risk management procedures to ensure the security policies and guidelines are enforced in daily operation. To reeducate the offender, recommend and implement remedial actions and control measures.
• Participate in various IT enhancement project to manage the system enhancement risk and control the project and change request.
• Function as an internal consulting resource on information security issues.
• Conduct the information security control and risk assessment program. Review compliance with the information security policy and associated procedures.
• Coordinate information security efforts with the Group Internal Audit and external Audit Institution.
• Monitor internal control and risk events. Maintain risk event log and provide periodic reporting on information security issues to the in-house risk committee.
• Coordinate information security awareness and training programs.
• Assist in coordinating business continuity plan and tests on a regular basis.

Qualifications / Experience

• University graduate in any computer related discipline
• At least 3 years of IT security management work experience, preferable in Life Insurance field
• Holder of CISSP/CISA/CISM certification required
• Experience in ISO27001 and/or COBIT security control framework implementation would be added advantage
• Solid security experience in various technology domain, servers, networking, web service, mobile app security, application development, IT project management, physical security and desktop
• Good analytical, problem solving skills
• Excellent interpersonal and communication skills.
• The ability to work effectively with management, staff, contractors and suppliers at all levels.

Interested parties, please send full resume, expected salary and contact telephone number by email to This e-mail address is being protected from spambots. You need JavaScript enabled to view it or fax 3011-9424.

You may visit our website www.arpcl.com for other job opportunities.