Our client is one of the few financial services firm having the status of Restricted Licence Bank (an authorized institution regulated by the Hong Kong Monetary Authority).

Job Summary

• Protect and safeguard the valuable information and help in effective management of the relevant risks that may be involved in various processes and procedures. Stored the data in secure manner at various systems by ensuring compliance with regulatory authority as well as various private and standard business procedures.

Specific Duties & Responsibilities

• Ensure that all the data pertaining to the company and its clients are safeguarded against unauthorized or illegal use.
• Oversees the Bank’s security control enforcement for safeguarding the Bank’s asset
• Implement various methodologies to protect against those who violate the security rules and regulations.
• Maintain the availability, integrity, and confidentiality of the information and maintain its authenticity, control and utility of the relevant data
• Identify and assess information security risk with suitable mitigation plan’
• Provide advice and support to the front line defense of servers and networks
• Support and update all the procedures related to security approval, accreditation and certification.
• Provide guidance, policy, standards to business department related to IT security
• Keep track of the resolution of vulnerabilities that have been identified on the system and to develop, update, maintain, and implement plan of action subsequently
• Monitor compliance issues with all vulnerability and mitigation procedures and establish and install security fixes at regular intervals
• Review security risk controls of services providers
• Liaise with Group company for implementation of new security controls
• Perform investigation into detected or reported security issues
• Ensure that the staff members have adequate training in various information security awareness and training related activities to promote a secure environment and an effective security culture that the subordinates adhere to the ethical standardsand in compliance with the Company policies and regulatory requirements
• Strictly adhere to the Company policies, procedures and ethical requirements, ensure the operation of daily activities are ethically and legally complied
• Support and participate in various ad hoc assignments or tasks

Education and Professional Requirements

• Minimum:  Degree in Information Technology or related discipline, CISA or CISSP  required
• Preferred:  Master degree in Information Technology or related discipline

Experience Requirements

• Minimum:  5 years IT experience in Banking/Finance or related industry with strong IT security consultation and support experience
• Preferred:8 years IT experience in Banking/Finance or related industry with hands-on experience in computer forensics analysis or investigations

Special Skills

• Strong IT security consultation and support experience with the possession of business sense and knowledge in finance services industry