IT Security &

Governance

Specialist

Tasks

Security Framework and Security Controls

- Define the security strategy with RISO (Regional Information Security Officer) to align with regional and global MB security goals. Align the strategy with MBFSK & MBMK ITM 

- Define policies & procedures and setup processes to achieve a sustainable management of information security controls. Also define & execute processes for implementing and maintaining controls

- Protect applications by defining access privileges, control structures and resources

Leading IT Security Communication & Report   

- Regular communication within and support for the IT team to ensure IT security guidelines are aligned and executed in the team

- Report to CIO and CEO for any non-compliant topics and suggest best practices based on the local, regional and global security standards.

Security consultant

- Consult the business and IT in regards to security policies and procedures when implementing new demands or application enhancements

- Identify and track vulnerabilities on the application landscape

- Actively support the data protection officer to ensure data protection policies are implemented in the application

- Proactively offer support and assist members of other teams

Other Relevant Duties as Assigned (기타 팀에서 요구하는 일) 

- Assisting Infrastructure & IT Security Team manager in order to plan and implement corporate and local tasks.

- Responsible for individual development as senior specialist and for next step

Qualifications

Required Educational Background

- A first degree in Computer Science or other acceptable degrees include information technology, IT security, management information systems, software engineering and networking. Professionals who possess a masters degree will have an advantage. 

Professional Experience

Preferred ---

- Minimum 7 years of IT Security and/or IT experience 

- Experiencㅆe how to apply security strategies and setup a working

Required Specific Knowledge and Capabilities

- Security experience in the financial services industry

- Experience in IT Security Audits and Financial services compliance

- Advanced English communication skill 

- Strategic thinking

- Leadership experience (direct or functional leader)

- Understanding infrastructure and application technologies

- ISO27001, CISA, CISSP, CPPG or related certificates are required