Banking Job – Mandarin speaking Information Security Manager (Banking) – rj

Overview

In this role you will lead the information security program for the London Branch, shaping policies, risk management and regulatory alignment. You will act as a 1.5 line of defence, providing independent security oversight within IT and driving resilience. You will partner with cross‑functional teams to strengthen controls, monitoring, and incident response. Your work supports safeguarding information assets while meeting UK regulatory expectations. This is a high‑impact opportunity to influence security strategy in a regulated banking environment.

Responsibilities

• Governance: upgrade and maintain information security policies, standards and procedures for the Branch in line with Head Office and regulatory requirements
• Risk management: identify, assess and monitor information security risks; maintain risk register and mitigation actions; report to senior management
• Control oversight: challenge IT security control implementations and monitor effectiveness across systems and applications
• Cyber security and monitoring: oversee vulnerability management, access control, security monitoring and incident detection; ensure assessments and penetration testing
• Incident management: establish and coordinate incident response, investigation, and reporting
• Operational resilience: support resilience framework, participate in disaster recovery planning and resilience testing
• Third‑party and outsourcing risk: assess security risks of vendors and outsourcing; embed security requirements in governance
• Regulatory compliance: ensure adherence to UK information security, cyber risk and resilience expectations; support audits
• Security awareness: drive information security training and awareness across staff

Key requirements

• Fluent Mandarin and English, strong written and verbal communication
• Experience in information security, cyber security or IT risk management
• Knowledge of information security standards and regulatory expectations
• Experience developing information security governance frameworks
• Understanding of banking IT environments and vendor risk management
• Strong analytical and risk assessment capabilities

• strong communication and presentation skills
• integrity and professionalism
• risk awareness and collaboration
• information security governance frameworks (ISO27001, NIST CSF, CIS Controls)
• vulnerability management and security monitoring
• incident response and disaster recovery

…