Assistant Manager - Security Compliance at CLP Group

Hong Kong, Hong Kong Island, Hong Kong S.A.R. -

Full Time

Start Date

Immediate

Expiry Date

30 Aug, 26

Salary

0.0

Posted On

01 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Compliance, Cyber Security, Risk Mitigation, Audit Coordination, Operational Reporting, Stakeholder Management, IT Security, OT Security, Supply Chain Security, Compliance Frameworks

Industry

Utilities

Description

Working Location: Kai Tak, Kowloon Employment Duration: Permanent The Assistant Manager - Security Compliance supports the implementation and ongoing management of security and cybersecurity compliance requirements across CLP Group and its supply chains. The role supports the provision of strategic and operational oversight to ensure that regulatory, contractual and internal security obligations and risk treatment actions are met consistently, supporting the protection of CLP’s people, its business lines, its critical infrastructure and the service it provides to its customers. Responsibilities Support and Develop Security Compliance Capability Assist in building security compliance competencies across the CLP Group, building cross-Group security compliance knowledge and capability. Security Compliance Execution Carry out compliance activities across physical, IT, OT, and supply‑chain environments, ensuring that security compliance requirements are effectively managed in alignment with business objectives, regulatory obligations and Group Security’s Policy and Standards. Further, ensure that agreed risk mitigation measures are applied appropriately. Guidance and Assurance Provide expert guidance and assurance to business units and suppliers to help them operate within established compliance frameworks and maintain a strong control environment. Together with the Group Security Risk Team, help business units and suppliers understand how security risks can impact on CLP’s business and assist them to recognise the importance of selected mitigation measures. Continuous Improvement Support enhancements in compliance processes, reporting, and control effectiveness to drive continuous improvement to enhance organisational resilience and support the reliable operation of generation, transmission and customer services. Monitor emerging regulatory, industry and internal requirements, ensuring timely updates to compliance frameworks and associated controls. Audit Coordination Assist in preparing for and supporting internal and external audits, assessments and remediation activities to maintain a robust compliance posture, and to verify that risk mitigation measures are applied appropriately. Operational Reporting and Stakeholder Support Prepare compliance reports and coordinate the tracking of outputs from audits, including aspects of non-compliance and inconsistent or absent risk mitigation measures. Requirements * Bachelor's degree in a related discipline. * At least 6 years’ experience in Cyber Security. * Experience in a technical Cyber Security role. * A Certified Information Systems Auditor or equivalent certification. * Fluent in English and Cantonese, verbal and written. ABOUT CLP CLP was founded in Hong Kong in 1901, at a time when electricity was still a novelty worldwide. Today we power millions of homes and businesses across the Asia-Pacific region with over 8,000 employees. In Hong Kong, we operate a vertically integrated electricity business providing a highly reliable supply of electricity to over 80% of the city’s population. Outside Hong Kong, we invest in the energy sector on the Chinese Mainland, in Australia, India, Taiwan Region and Thailand. Our business spans the electricity value chain ranging from power generation, transmission and distribution to retail and smart energy services. We have a diversified portfolio of generating assets that uses a wide range of fuels sources including nuclear, renewables, gas and coal.  To meet the evolving needs of energy users in a world being reshaped by decarbonisation and digitalisation, we strive to embrace new opportunities and expand our horizons as we fulfil our purpose to Power Brighter Tomorrows. 

Responsibilities

The role involves implementing and managing security and cybersecurity compliance across the CLP Group and its supply chains. It focuses on providing strategic oversight to ensure regulatory, contractual, and internal security obligations are met to protect critical infrastructure.