Information Technology

Hang Sang deploys the latest technologies to meet changing customer needs and enhance the Bank’s leading and competitive position in the market. 

Our professional Information Technology experts are dedicated to developing customer-oriented systems and ensuring that our valuable customers can enjoy a sophisticated range of banking products in the most efficient and convenient way. Our Internet/Mobile Banking and Payment services highlight our development as a major e-player. Innovative and technology-driven online services such as Internet/Mobile banking, Mobile Payment and other wireless financial services allow our customers to manage their wealth with ease any time around the world. 

Should you join our Software Delivery function, you will have the opportunity to work on software/application development with state of the art technologies for supporting strategic business growth and development. You will also get exposures to various business areas and processes like Retail Banking, Wealth Management, Commercial Banking, Investment Banking and Private Banking and work closely with our business users to meet their needs for exploiting market opportunities. Moreover, you will be part of a strong team in a large development workplace in IT industry with excellent career prospects and extensive training and learning support. Designing and delivering the best solutions as well as maintaining the stability and security of different computer systems will be your critical mission. You will contribute to enhancing operational efficiency and increasing the productivity of the user departments.

We are currently seeking a high caliber professional to join our department as Cyber Security Manager.

Principal responsibilities

• Conduct application risk assessment and provide design consultancy on software delivery. 
• Conduct application source code review/static code analysis, verification of false positives.
• Conduct mobile application penetration testing for mobile application on the IOS/Android platform.
• Collaborate with IT teams to ensure that IT security controls are embedded in the IT systems and applications.
• Keep abreast of the latest cyber security threat landscape, evaluate the potential impact to the bank.
• Conduct 3^rd party security reviews for the bank’s vendors including cloud based technology

Requirements

• University degree in Computer Science or related disciplines
• Over 5 years’ experience in IT security and risk management area
• Strong technical or security skills related to IT applications and infrastructure in financial institution
• Solid experience in cyber security controls and incident handling
• Good knowledge in banking environment
• Knowledge and experience in Fintech is desirable
• Strong knowledge of banking regulations / guidelines relating to cyber security and technology risk management
• Strong self-motivation, with good leadership, communication, interpersonal and analytical skills
• Great sense of ownership and servicing mindset
• Good command of both spoken and written English and Chinese; Mandarin is an advantage
• Possess at least two of the professional qualification such as CISM, CISA, CISSP, CCSP and CEH
• Experienced in web and mobile application development/penetration testing preferred
• Experienced with cloud security is highly preferred
• Experienced in performing security risk assessment and audits based on industry standards
• Familiar with ISO 27001 ISMS
• Great sense of ownership and servicing mindset to ensure efficient and effective customer service processes 

All information provided by applicants will be used only for recruitment purposes and will be used strictly in accordance with the Bank's personal data policies, a copy of which may be obtained by the applicant upon request. Unless otherwise instructed in writing by the applicant concerned, applicants may be considered for other suitable positions within the Bank and its related companies. The personal data of unsuccessful job applicants may be retained for a maximum of two years from the date when the job application is rejected and such data may be retained for a longer period if there is a subsisting reason that obliges the Bank to do so, after which the personal data will be destroyed.