Information Technology and Security Officer

About the role

We are looking for an experienced IT and Security professional to lead and oversee information security, data governance and business continuity for Asia.

The role sits at the intersection of technology, risk and operations. You will work closely with Geneva head office, regional stakeholders and external service providers to ensure our systems, data and infrastructure remain secure, resilient and compliant.

You will also act as the local IT contact point, supporting users with technical support and coordinating with the IT team within Credit Agricole.

What You will be Responsible For

Information Security and Governance

• Implement and monitor the Bank's information security framework to safeguard data integrity, confidentiality and availability
• Maintain relevant documentation for information security, data governance and business continuity
• Promote security awareness across the Bank through training and communication
• Investigate security incidents/breaches and implement relevant preventive measures
• Prepare regular security reporting for both Asia and Group stakeholders

Business Continuity and Risk Management

• Implement and oversee business continuity and disaster recovery frameworks aligned with Group Standards and local regulatory requirements
• Manage third-party information security and conduct business continuity risk assessments
• Partner with regional and Group stakeholders on security initiatives
• Support internal and external audits, inspections and regulatory reviews

IT Operations and Support

• Oversee day-to-day security infrastructure and system access controls
• Provide first-level IT support to users and escalate support issues to 2nd level IT support where required
• Coordinate with Head Office for the implementation of Group Information Security initiatives

What We Are Looking For

• More than 8 years' of relevant experience in Information Security, IT risk or Technology Governance within banking or financial services
• Extensive knowledge of information security, local regulations and industry best practices
• Advanced IT knowledge in Network and Systems and Certification in information security (CSX, CISA, CISSP…) will be an advantage
• Experience managing outsourced IT environments and vendor risk, information security risk assessment and audit reviews
• Strong stakeholder management skills and ability to balance hands-on operational matters with strategic oversight
• Ability to prioritize and to manage multiple projects in parallel
• Team player with strong ability to analyze and solve problems
• Dynamic, proactive, autonomous, flexible