Officer - IT Governance & Security

About Us Founded in 1956, Maxim’s Group is one of Asia’s leading food and beverage companies, operating Chinese, Western, Japanese and Southeast Asian restaurants, quick service outlets, bakery shops and cafes, and an institutional catering service. Maxim's Group also produces a range of festive products, including the award-winning Hong Kong MX Mooncakes, and is a licensee of Starbucks Coffee, Genki Sushi, IPPUDO, The Cheesecake Factory and Shake Shack in various territories. Altogether, the Group has over 40,000 employees and 2,000 outlets in Asia. Proud of our heritage and humbled by our success, we are committed to a sustainable and innovative future. To learn more about Maxim’s, visit www.maxims.com.hk Job Responsibilities: - Maintain and update Group IT policies, standards, procedures, and guidelines in alignment with business requirements, regulatory expectations, and industry best practices. - Support IT governance and compliance activities by monitoring control evidence, coordinating internal and external audit preparation, collecting stakeholder responses, and tracking remediation actions against internal policies, ISO 27001, PCI DSS, data protection requirements, and other applicable security standards. - Support security governance initiatives, including control improvement, risk remediation follow-up, vendor security review, and adoption of security tools or processes where required. - Support security and risk assessments for AI and GenAI tools, cloud platforms, third-party services, and other emerging technologies, including the maintenance of governance guidelines, acceptable use requirements, risk assessment records, and control evidence. - Coordinate and support information security awareness activities to strengthen employee awareness of cybersecurity, data protection, phishing, and responsible technology use. Job Requirements: - Minimum 1–3 years of experience in IT governance, cybersecurity, audit, risk management, or compliance within a sizable organization. - Experience supporting security and risk assessments for AI and GenAI tools, cloud platforms, third-party services, and other emerging technologies, including governance guidelines, acceptable use requirements, and risk assessment records. - Practical knowledge of security and governance frameworks, such as ISO 27001, PCI DSS, NIST Cybersecurity Framework, or data protection requirements. - Good communication, presentation, interpersonal, and stakeholder coordination skills. Interested parties please apply with full resume, state current and expected salaries by clicking "Apply Now". All applications and data collected will be treated in strict confidence and used exclusively for recruitment purposes. Only short listed candidates will be invited for interview. The company will retain the applications for a maximum period of 24 months and may refer suitable candidates to other vacancies within the Group.

• Tech Governance - Security Compliance & Governance Engineer

  OKX · Hong Kong, Hong Kong SAR

• Assistant Vice President (AVP), Information Security Governance

  Hong Kong Exchanges and Clearing Limited (HKEX) · Hong Kong, Hong Kong SAR