We are looking for someone who has: Bachelors degree holder, preferably in a relevant discipline Minimum 6 years of relevant experience in managing information security function for a sizable company Hands-on experience in developing and implementing enterprise-level information security policies & procedures, and training Familiar with legal, regulatory and other compliance requirements, including PCI-DSS Familiarity with risk management methodologies Excellent planning, organizing, interpersonal and communication skills Excellent communication skills in English.

Fluency in Chinese (Mandarin) will be desirable.

Professional certification such as CISSP, CISM, CISA, GIAC or equivalent will be highly desirable Familiarity with ISO/IEC 27001, NIST or equivalent will be highly desirable