Security Officer (Financial)

A leading financial institution in Taipei is seeking an experienced Information Security Officer to join their team and play a pivotal role in safeguarding the organisation’s information assets. This position offers you the opportunity to lead and support critical information security governance initiatives, ensuring compliance with regulatory requirements, corporate policies, and industry best practices.

Salary: Competitive and based on experience

Location: Taipei

Keywords: information security governance, regulatory compliance, cybersecurity risk assessment, policy development, audit coordination, stakeholder management, cross-functional collaboration, security awareness, risk management frameworks, bilingual communication

What you'll do:

• Lead and support information security governance initiatives to ensure compliance with regulatory requirements, corporate policies, and recognised industry best practices.
• Develop, review, and maintain comprehensive information security policies, standards, procedures, and governance frameworks tailored to the needs of the organisation.
• Coordinate and facilitate internal audits, regulatory inspections, compliance assessments, and remediation activities by providing expert guidance and documentation.
• Conduct thorough cybersecurity risk assessments and deliver actionable recommendations to strengthen security controls and enhance risk management practices.
• Collaborate effectively with business units, technology teams, regional Information Security groups, and Head Office stakeholders to drive key security initiatives and governance programmes.
• Support governance activities related to technology risk management, user access management (UAM), third-party risk management (TPRM), vulnerability management, data protection, and other critical domains.
• Monitor regulatory developments, emerging cybersecurity risks, and industry trends to ensure timely implementation of required controls and compliance measures.
• Prepare detailed management reports, risk assessments, governance dashboards, and presentations for senior management committees to inform strategic decision-making.
• Participate actively in regional and local cybersecurity projects as a governance and risk management subject matter expert.
• Promote information security awareness throughout the organisation by contributing to the enhancement of the company’s security culture and control environment.

What you bring:

• 5+ years of proven experience in Information Security, IT Risk Management, Cybersecurity Governance, Technology Risk, Audit or Compliance within highly regulated industries such as banking or financial services.
• Familiarity with Taiwan financial industry regulatory requirements including hands-on support for regulatory inspections, audit requests, and compliance follow-up activities.
• Demonstrated ability in information security governance including policy development, control management, risk assessment execution, audit coordination, issue management, and remediation tracking.
• Comprehensive understanding of cybersecurity domains such as User Access Management (UAM), Privileged Access Management (PAM), Third-Party Risk Management (TPRM), Vulnerability Management (VM), IT Asset Management (ITAM), Data Security Governance, Security Awareness Programmes, Incident Response Governance.
• Proven skills in reviewing and enhancing information security policies, procedures, standards, operation manuals for continuous improvement.
• Exceptional documentation abilities coupled with analytical thinking skills for problem-solving; adept at managing stakeholder relationships across multiple functions.
• Capacity to manage multiple priorities independently while coordinating effectively with cross-functional teams under tight timelines.
• Fluent English communication skills—including listening, speaking, reading and writing—with proficiency in Chinese required for bilingual stakeholder engagement.
• Ability to communicate clearly with regional Information Security teams as well as Head Office stakeholders; experience liaising with auditors and local management is essential.
• Bachelor’s degree or above in Information Security, Computer Science, Information Systems/Management or other IT-related disciplines; relevant certifications such as CISSP/CISM/CISA/CRISC/ISO 27001 Lead Auditor/Security+ are preferred.
• Knowledge of recognised frameworks like ISO 27001/NIST Cybersecurity Framework/COBIT/CIS Controls or equivalent industry standards is advantageous.
• Professional experience supporting audit processes/regulatory compliance/security governance/IT risk management/cybersecurity control oversight is highly valued.

What sets this company apart:

This organisation stands out as one of Taipei’s most respected financial institutions renowned for its unwavering commitment to integrity and operational excellence. Employees benefit from a workplace culture that prioritises collaboration across departments—ensuring every voice is heard when shaping critical decisions about information security. The company invests heavily in professional development through generous training opportunities designed to keep staff ahead of industry trends. Flexible working arrangements allow you to balance personal commitments while pursuing ambitious career goals within a supportive leadership framework. The institution’s dedication to maintaining high standards of compliance means you’ll be part of a team where your expertise is valued not only locally but also regionally—offering unique opportunities for growth through participation in APAC-wide projects. Here you’ll find an environment that encourages knowledge sharing among peers while nurturing talent through mentorship programmes—all aimed at helping you achieve your full potential within the ever-evolving field of cybersecurity governance.

What's next:

If you are ready to take your career in information security governance to new heights within Taipei’s thriving financial sector—this is your moment!

Apply today by clicking on the link provided below.