Job description

Information Security Officer

OneDegree is an InsurTech company, with a virtual insurer license granted by the Hong Kong Insurance Authority in 2020 Since then, we have grown quickly into the leading Hong Kong virtual insurer with an ambition to bring consumers a seamless and instant insurance and claim experience through technology. We currently offer multi-line digital insurance products, including pet, medical, fire and home insurance for individuals, and cyber security and digital asset insurance for enterprise businesses.

Want to join us and make a change? Join our team as an Information Security Officer at OneDegree, the front-tier digital insurer in the insurance industry. Our commitment to utilizing the latest technologies, such as cloud computing and artificial intelligence, sets us apart and ensures we stay ahead of the curve in data protection and risk management. This role offers a junior candidate not only a foundational career in information security but also exposure to innovative technologies and practices.

If you love building winning products, come and join our team!

What you will be doing:

Draft and maintain information security policies and procedures to ensure compliance with regulatory requirements and industry best practices.
Conduct regular risk assessments on IT systems and business processes, identifying vulnerabilities and managing the risks.
Implement global security initiatives within the local business context, ensuring alignment with the global security strategies.
Serve as the primary contact for all information security-related questions from stakeholders, providing timely and accurate responses.
Collaborate with IT and business teams to enhance information security awareness and adherence to security practices throughout the organization.
Monitor and report on the effectiveness of security measures and compliance with established policies.

What we are looking for:

Bachelor's degree in Information Technology, Information Security, Computer Science or a related field.
1-2 years of experience in information security management.
Holder of relevant industry recognized security testing certification e.g. CISSP, CISM, CRISC, CISA etc., will be an advantage.
Strong understanding of information security practices.
Excellent communication skills, with the ability to explain complex security concepts to non-technical stakeholders.
Proactive and detail-oriented with strong problem-solving skills.
Fluency in English and Cantonese is essential.

More about us: