Operations, Services and Technology – Information Technology

Hang Sang deploys the latest technologies to meet changing customer needs and enhance the Bank’s leading and competitive position in the market.

Our professional Information Technology experts are dedicated to developing customer-oriented systems and ensuring that our valuable customers can enjoy a sophisticated range of banking products in the most efficient and convenient way. Our Internet/Mobile Banking and Payment services highlight our development as a major e-player. Innovative and technology-driven online services such as Internet/Mobile banking, Mobile Payment and other wireless financial services allow our customers to manage their wealth with ease any time around the world.

Should you join our Software Delivery function, you will have the opportunity to work on software/application development with state of the art technologies for supporting strategic business growth and development. You will also get exposures to various business areas and processes like Retail Banking, Wealth Management, Commercial Banking, Investment Banking and Private Banking and work closely with our business users to meet their needs for exploiting market opportunities. Moreover, you will be part of a strong team in a large development workplace in IT industry with excellent career prospects and extensive training and learning support. Designing and delivering the best solutions as well as maintaining the stability and security of different computer systems will be your critical mission. You will contribute to enhancing operational efficiency and increasing the productivity of the user departments.

We are currently seeking high caliber professionals to join our department as IT Security Manager.

Principal responsibilities:

• The role is to ensure all control measures of IT Security are undertaken with IT Security risks properly addressed in IT systems development and solutions deployment to minimize the risk exposure of the Bank. The role is also to ensure compliance with Group and regulatory policies and standards (including HKMA, SFC, IT SOX, Strategic Control of Privileged Access Program and audit requirements).
• The role focuses on one of the areas of IT Security below covering Cyber Security and Application Security.
• Application Security:

  • Conduct application risk assessment and provide design consultancy on software delivery.

  • Conduct application source code review/static code analysis, verification of false positives.

  • Conduct mobile application penetration testing for mobile application on the IOS/Android platform.

  • Collaborate with IT teams to ensure that IT security controls are embedded in the IT systems and applications.

  • Keep abreast of the latest cyber security threat landscape, evaluate the potential impact to the bank.

Requirements:

• University degree in Computer Science or related disciplines
• Over 5 years’ experience in IT security and risk management area
• Strong technical or security skills related to IT applications and infrastructure in financial institution
• Solid experience in cyber security controls and incident handling
• Good knowledge in banking environment
• Knowledge and experience in Fintech is desirable
• Strong knowledge of banking regulations / guidelines relating to cyber security and technology risk management
• Strong self-motivation, with good leadership, communication, interpersonal and analytical skills
• Great sense of ownership and servicing mindset
• Good command of both spoken and written English and Chinese; Mandarin is an advantage
• Experienced in secure code development
• Familiar with Apple IOS and Andriod vulnerabilities
• Possess professional qualification such as CISM, CISA and CISSP will be an advantage
• Great sense of ownership and servicing mindset to ensure efficient and effective customer service processes

All information provided by applicants will be used only for recruitment purposes and will be used strictly in accordance with the Bank's personal data policies, a copy of which may be obtained by the applicant upon request. Unless otherwise instructed in writing by the applicant concerned, applicants may be considered for other suitable positions within the Bank and its related companies. The personal data of unsuccessful job applicants may be retained for a maximum of two years from the date when the job application is rejected and such data may be retained for a longer period if there is a subsisting reason that obliges the Bank to do so, after which the personal data will be destroyed.