Information Security Consultant — Zurich Insurance (sede Ticino)

Job Accountabilities - Support the Greater China Business Information Security Officer (BISO) in strengthening information security governance, risk management and regulatory compliance across China & Hong Kong business units (BUs) - Identify control gaps and proactively drive remediation activities in collaboration with business and IT stakeholders - Act as a trusted security advisor, providing consultancy support to business, IT and security initiatives, including major transformation or change programs - Validate and analyze security metrics provided by Group / APAC team (e.g. vulnerabilities, cloud and application security posture, security capability adoption, awareness levels), and lead remediation efforts at the BU level - Consolidate, interpret and report regional and BU-level IT security metrics to enable BU management to clearly understand information security risk exposure - Engage with business and IT teams to coordinate, perform and manage a broad range of security and risk assessment, track assessment findings and drive timely remediation to closure, for the following assessments: - Cloud security assessments - Third-party and vendor security assessments - Business and IT application security assessments (pre- and pro-implementation, major changes, etc.) - Regulatory compliance assessments (e.g. local regulations, PCI, GL20, PIPL, CBDT) - IT compliance and control assessments, IT risk assessments - Thematic or targeted security reviews - Drive BU-level security awareness and education programs to enhance employee cyber resilience - Support the Group Cyber Fusion Centre by coordinating and facilitating IT security incident response activities across BUs; assist in incident investigation, containment and forensic activities in collaboration with Group and local stakeholders - Ensure actionable recommendations from the Group Cyber Threat Intelligence team are implemented effectively at the BU level - Proactively communicate relevant cyber threat intellige