IT Security Manager

Job Responsibilities

• Act as the single point of contact for Security Governance, Risk and Compliance
• Build and maintain a client relationship especially with the client’s GRC & security organization (CISO) and staff
• Represent Atos within the customer security governance forum
• Run account security governance forum, ensure operational security
• Develop and maintain client-specific account security plan
• Manage (receive, assess) and report security incidents
• Participate in security audit hosting and audit remediation activity
• Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
• Leverage Atos global tooling (e.g. Alcatraz, ART, etc.) to advise management regarding the maintaining of the security, compliance & risk levels within required targets
• Coordinate with all partners delivering security services on behalf of Atos not limited to Data Protection Office, Business Service Line - Operational Security and Compliance Officer, Client Continuity Management, and other Atos Divisions
• Contribute to security services growth, upsell security services into account

Job Requirements

• At least 5 years’ experience working in a risk management, audit, security or a technical delivery role
• Experience in IT outsourcing business or 5+ years in industry vertical
• Excellent written and spoken English and Chinese
• Holder of CISSP certification, CISM or CRISC
• Must have an in-depth knowledge and a fully demonstrable and practical experience of the security standard ISO:27001
• Excellent and effective communication skills at all levels of management including verbal, written and presentation format
• Ability to lead effectively in diverse, multi-national and virtual environments
• Self-motivated with a positive can-do attitude
• Able to communicate with all levels of stakeholders, up to and including CXOs, within Atos, the Customer account team, suppliers and third parties, on a day-to-day basis. This communication will include face-to-face meetings, teleconferencing and presentations.