Key responsibilities
● Contribute to the management and maintenance of PCCW Global’s Information Security Management System (ISMS) in accordance with the ISO 7001 standard
● Develop and maintain information security policies, processes and procedures to support ISMS implementation and improvement
● Identify, assess, and monitor information security risks, threats and vulnerabilities.
● Gather and analyse risk data to produce risk reports
● Undertake information security risk assessments and maintain and update the Risk Register
● Undertake information security control assessments to ensure controls are effectively managing risks and meeting applicable compliance obligations
● Provide risk management guidance and support to other Information Security Officers as required
● Produce and present information security measurements and metrics
● Ensure that core ISMS documentation is accurate and updated in a timely manner, including the Risk Register, Information Asset Register, Statement of Applicability and Incidents, and Corrective Actions and Improvements Register
● Conduct compliance audits, including internal audits, across a range of information security controls that support the certification requirements of ISO 27001
● Facilitate and coordinate external compliance audits and ensure that audit findings are actioned as required
Core competencies, skills and experience
● At least 7 years’ experience working in information security, audit and risk management
● End-to-end ISMS implementation experience
● Familiarity with key frameworks, e.g., ISO 27001, PCI-DSS, NIST
● Industry certifications such as CISA, CISM, CISSP, CRISC are beneficial but not essential.
● Experience running workshops, demonstrations and training
● Proven ability to interact with technical and business stakeholders
● Breadth and depth of knowledge in a range of technologies, security concepts and best practices
● Highly developed communication and organisational skills
● Experience with networking, software development or cloud platforms will be highly regarded
PCCW Limited is a global company headquartered in Hong Kong which holds interests in telecommunications, media, IT solutions, property development and investment, and other businesses.
The Company holds a majority stake in the HKT Trust and HKT Limited*, Hong Kong’s premier telecommunications service provider and leading operator of fixed-line, broadband, mobile communication and media entertainment services. HKT delivers end-to-end integrated solutions employing emerging technologies to assist enterprises in transforming their businesses. HKT has also built a digital ecosystem integrating its loyalty programme, e-commerce, travel, insurance, fintech and healthtech services to deepen its relationship with customers.
PCCW owns a fully integrated multimedia and entertainment group in Hong Kong engaged in the provision of OTT video service locally and in other places in the region. Through HK Television Entertainment Company Limited, PCCW also operates a domestic free TV service in Hong Kong.
In addition, PCCW holds a stake in Pacific Century Premium Developments Limited and other overseas investments.
PCCW is part of Pacific Century Group, named by Forbes as one of the World's Best Employers 2023.
*HKT Limited is a company incorporated in the Cayman Islands with limited liability.
Listing and trading
PCCW shares are listed on The Stock Exchange of Hong Kong Limited (SEHK: 0008) and traded in the form of American Depositary Receipts on the OTC Markets Group Inc. in the US (Ticker: PCCWY).
