Job Responsibilities:

• Designing and leading the implementation of security controls to minimize the information security risks of the company
• Ensuring the adequate security controls are in place according to the company’s policies and industrial standards
• Ensuring the effectiveness of security controls for both in-house IT operation teams and outsourced operations
• Ensuring and promoting secure SDLC and secure coding practices to in-house developed applications
• Keeping up-to-date knowledge on information security processes and technologies, including emerging cyber-attack threats and the corresponding mitigation controls
• Performing regular vulnerability assessments and penetration tests to the company’s IT systems and network infrastructures and driving the patching management process to ensure critical vulnerabilities are addressed timely
• Defining the computer security incident response process, including maintaining escalation channels for all spectrum of users and performing diagnosis
• Working closely with key stakeholders internally and externally to provide remediation on security incidents
• Maintaining dashboards and collecting metrics and reports on cyber threats and IT systems/infrastructures vulnerability
• Providing expert consultation to other teams

Requirements:

• University Degree in Information Security, IT, Computer or related subjects
• A minimum of 8 years of working experience in IT security or equivalent
• Holder of security certificate such as GIAC, CEH, OSCP, CISSP, CISM, CISA is preferred
• Knowledgeable in TCP/IP networking and network security products such as Firewall, IDPS, Web proxy, etc.
• Experienced in Windows and Linux/UNIX operation systems
• Familiar with information security technologies such as email and web security, PKI, data encryption and end-point protection systems
• Familiar with information security standards such as ISO27001, C-RAF, COBIT 5 and CIS Critical Controls
• Good understanding of cyber-attack techniques (e.g. APT, DDoS, malware, phishing, etc.) and the corresponding response and investigation methodologies
• Knowledgeable in cloud security and application security, including web and mobile app
• Proactive and self-initiated
• Strong influencing and communication skills

 

We offer successful candidate an attractive remuneration package and excellent career prospects. Interested parties please send your resume, present and expected salary, contact details and quoting the reference number by clicking "Apply Now"

 

Visit our web site: http://www.octopus.com.hk/

 

The personal data collected will be used for recruitment purposes only. If you are not contacted by us within six weeks, you may consider your application unsuccessful. Personal data with an unsuccessful applicant will be destroyed 12 months after rejection of the application. During this retention period, you have the right to request for correction or destruction of your personal data at any time. Any request for the correction or destruction of personal data should be addressed in writing to our Human Resources & Administration Department.

 

We are an equal opportunity employer and will ensure that every job applicant and staff has equal employment opportunities and will not be disadvantaged because of their sex, pregnancy, marital status, family status, disability or race.

 

We operate one of the world's leading and most extensively accepted contactless smartcard payment systems, providing both offline and online payment services. There are over 160,000 acceptance points for Octopus cards in Hong Kong, spanning across the city. We have over 30 million Octopus cards and products in circulation. We handle 15 million transactions a day with transaction value of HK$260 million. 

Our Vision
To become the most preferred payment and lifestyle companion that connects customers and business partners through our best-in-class products and services.

Our Mission
Making everyday life easier.

Our Values
Customer Centricity, Simplicity, Inclusiveness & Trustworthiness.

Our people are our most important asset. We respect each other, embrace collaboration, innovation and partnership. Come join us and make an impact to the future payment society!