Information Security Lead (IAM & Governance)

Pinpoint Asia is representing a premier multinational financial institution, a leader in its field, with a strong presence across the region. We are seeking a highly skilled and motivated Information Security Lead to join their dynamic team in Hong Kong.

This is an exciting opportunity for a seasoned security professional to play a pivotal role in shaping the future of our client's cybersecurity landscape. You will be instrumental in enhancing their security maturity by bridging the gap between high-level strategic governance and practical, hands-on operational excellence. If you have a deep passion for Identity & Access Management (IAM) and a talent for driving security initiatives, this role is for you.

Your Role & Responsibilities

As the Information Security Lead, you will be a key driver in protecting the firm's critical information assets. Your responsibilities will include:

Security Governance & Risk Management:

• Spearhead the development and continuous improvement of the corporate information security governance framework.

• Ensure all security policies, standards, and procedures are aligned with industry best practices and evolving regulatory demands.

• Conduct and oversee comprehensive security risk assessments, vulnerability management cycles, and remediation programs to proactively identify and mitigate threats.

IAM Subject Matter Expertise:

• Act as the firm's subject matter expert for all Identity & Access Management (IAM) functions.

• Provide leadership and robust oversight for daily IAM operations, including access control models, user provisioning, and periodic access certification reviews to ensure compliance.

Security Transformation & Project Delivery:

• Lead high-impact security uplift projects from planning and design through to successful execution and post-implementation validation.

• Partner with IT infrastructure and application teams to deploy next-generation security solutions across the enterprise.

• Enhance security testing practices and provide clear, actionable recommendations to strengthen the organization's overall security posture.

Stakeholder Collaboration & Engagement:

• Serve as a primary point of contact for IT security matters, collaborating effectively with internal business units, external partners, technology vendors, and auditors.

• Lead cross-functional teams to execute strategic security projects and initiatives.

What You'll Need to Succeed

We are looking for a candidate who is both a strategic thinker and a hands-on practitioner.

• Experience: A minimum of 8 years of dedicated experience in an information security role.

• Core Technical Skills: Deep, hands-on technical expertise in Identity & Access Management (IAM) is essential. This includes practical experience with access control models (RBAC), provisioning workflows, and certification technologies.

• Industry Background: Proven experience working within a large, regulated enterprise environment is required (e.g., financial services, banking, insurance). You must be familiar with the demands of a high-security standard workplace.

• Broad Security Knowledge: Strong understanding of security governance frameworks (e.g., ISO 27001, NIST), risk assessment methodologies, and modern vulnerability management practices.

• Leadership: Demonstrated experience in leading and managing security projects, with the ability to influence and guide cross-functional teams.

• Bachelor’s Degree in Information Technology, Computer Science, or a related field.

• Professional certifications such as CISSP, CISM, or CRISC are highly desirable.

If this outstanding opportunity sounds like your next career move, please submit through "Apply Now" or send your resume in Word format to Sedrick Chan at resume@pinpointasia.com and put Information Security Lead (IAM & Governance) in the subject header.

Data provided is for recruitment purposes only.