Responsibilities

1. Acting as a first line defence on the Information and Cyber security matters
2. Assisting in security solution selection, evaluation and implementation based on the procedures and guidelines of the Bank
3. Performing security operation matters including key management, privileged account management, patch management, threat detection and monitoring, system and network hardening and review, vulnerability scanning, application whitelisting, etc.
4. Performing monitoring of security control of IT operations
5. Keeping track of the industrial security practices to identify potential area of enhancement on an ongoing basis

Requirements

1. Degree holder in Computer Science or related discipline
2. Minimum 3 years’ relevant working experience in IT Security, Information Security or IT Audit
3. Experience in information / cyber security controls and review
4. Understanding of regulatory requirements such as HKMA SPM, Cybersecurity Fortification Initiatives (CFI), SFC, PCI-DSS and etc.
5. Hands-on experience in patch management, key / certificate management, privileged account management, vulnerability scanning, software / application whitelisting , APT protection, system hardening
6. Knowledge of firewall, router, switch, IPS/IDS, APT, VPN, Database, Window / Linux / AIX platforms