Senior Associate, Cyber/IT Security, Security Operations Services, Technology & Operations

Business Function

Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

Job Description / Responsibilities

• To review. assess and align with the Group's direction and assist in formulating and implementing Information Security strategies, policies and governance
• Responsible for evaluating, executing, monitoring and reporting for information security risk assessment activities
• Perform IT / cyber security risk assessments and report on ways to minimize threats and enhance the Bank's information security control methodology
• Serve as a Subject Matter Expert (SME) for information security, providing guidance and advisory services to project teams, business partners, and developers throughout the project lifecycle
• Provide security advice to ensure information security risks are mitigated in complex projects and initiatives, ensuring designs, development, and implementations are in accordance with the Bank's Information Security Standards and regulatory compliance.
• Review architecture and solution design documentation, identifying and assessing potential risks, and evaluating technical design and security design documents
• Track latest IT security innovations and keep abreast of latest cyber security technologies

Requirement

• University Degree in Computer Science or related disciplines
• Possess professional certification under HKMA's Enhanced Competency Framework on CyberSecurity
• Minimum 2 years of experience in Information Security, Risk or Control & Compliance, IT Analysis
• Good presentation and analytical skill
• Work experience in Financial Industry in Hong Kong is a plus
• Experienced in performing security risk assessment based on industry standards
• Experienced in vulnerability management / incident response and remediation / penetration testing preferred
• Experienced in architecture and solution design documentation review, identifying ad assessing potential risk, and evaluation technical design and security design documents.
• Experience with cloud security is highly preferred

Apply Now

We offer a competitive salary and benefits package and the professional advantages of a dynamic environment that supports your development and recognises your achievements.

We regret only shortlisted candidates will be notified.