Cybersecurity Risk Consultant (Contract)

Our client is a major international bank with an established and growing Corporate & Investment Banking presence across key global markets.

Key Responsibilities

• Conduct cybersecurity risk assessments covering applications, infrastructure and technology projects
• Evaluate security controls against internal policies, regulatory requirements and industry standards
• Perform third-party security risk assessments and vendor due diligence
• Review policies, procedures, technical documentation and control evidence
• Identify cybersecurity risks, complete gap analyses and recommend remedial actions
• Prepare assessment reports, risk registers, presentations and governance materials
• Track remediation progress and follow up on agreed action plans
• Support cybersecurity governance activities, including policy reviews, audit preparation and regulatory compliance
• Coordinate assessment work with IT, Operations, business teams and regional stakeholders
• Assist with other cybersecurity risk and governance tasks as required

Required Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology or a related field
• 3–5 years of experience in cybersecurity, IT risk, technology risk, information security or IT audit
• Proven experience conducting cybersecurity or technology risk assessments
• Solid understanding of banking cybersecurity regulations and technology risk frameworks in Asia (e.g. HKMA, MAS, Japan FSA, ISO 27001, NIST CSF)
• Banking or financial services experience preferred
• Prior involvement in third-party / vendor security risk assessments is an advantage
• Strong analytical, documentation and communication skills
• Able to work independently and manage multiple priorities
• Fluent in spoken and written English; proficiency in Mandarin is preferred