Our client, a major bank, is seeking the follow talent to cope with its business expansion.

RESPONSIBILITIES

• Referring to the best practice of risk governance and management
• Reviewing the adequacy of the implemented controls
• Perform technology risk identification, response and monitoring
• Conduct technology risk assessment and advise management on the status of risk acceptance or mitigation when residual risk persists
• Conduct Cybersecurity risk and maturity assessment in accordance to the HKMA’s requirement
• Execute the vulnerability and penetration testing as necessary
• Keep track of Cyber risk intelligence from regulatory initiated platform and industry alliances
• Provide consultancy and advice to the adoption of emerging and disrupting technologies by new initiatives in relation to technology risk
• Prepare the company-wide awareness or education program to promote the security cultures of the company

REQUIREMENTS

• Degree holder of Information Technology or relevant discipline
• Minimum 8 years’ related experience in IT related functions including at least 4 years in Audit, TRM or Information Security Management
• Obtained Core / Professional level qualification of Relevant Practitioner under the HKMA ECF on Cybersecurity
• Certified in CISSP, CISA, CISM or other recognized certificate is a must
• Holder of ethical hacking certification (e.g. CEH) would be an added advantage
• Sound knowledge in cryptographic techniques, firewall/network, DLP, APT, DDoS, IAM (identity and access management) and vulnerability management
• Familiar with regulatory requirements such as HKMA SPM, C-RAF, iCAST, MAS and PCI-DSS
• Good understanding of industry best practices e.g. ISO20001 and COBIT
• Good command of spoken and written English and Chinese (including Putonghua)

Interested parties please CLICK HERE to apply online. Please note that only shortlisted candidates will be notified. All information gathered will be treated in strict confidence and solely used for recruitment purposes. Kindly CLICK HERE for more job opportunities on our website.