Responsibilities:

• Responsible for the development of the company IT Security and technology risk related policies, guidelines and standards operating procedures
• Participate in internal regular security assessment and compliance review activities
• Perform vulnerability scanning and penetration test, analyses the results and propose solutions
• Ensure internal IT departments and key business units are compliant with the company IT Security Policies and standard
• Provide technology risk management support, security incident responses and security threat intelligence analysis
• Maintain a regular governance for managing the information security risks performance
• Support the on-going maintenance and update of the company IT Security Policies and Standard according to the industry best practices (i.e. ISO 27001 and SANS)
• Preferably with technical background in networking/coding/security control and practice in Financial Industry
• Conduct necessary IT Security and Risk control monitoring, testing to determine the control effectiveness
• Direct report to Managing Director

Requirements:

• Degree holder in Computer Science, Information Technology or related disciplines
• At least 8 years’ relevant experience in Information Security, Risk Management area
• Solid experience and knowledgeable of key security technologies
• Information Security Certification holders of SANS GCIH/ SANS GPEN/ SANS GWAPT/ OSCP/ OSCE is preferred
• Certification holders of CISSP / CISA is preferred
• Mature, adaptive with good analytical skills
• Strong interpersonal and communication skills
• Good command of both spoken and written Cantonese, Chinese and English
• Business travel is required

We offer rewarding career with attractive remuneration package including 5-days week, Double pay, Medical scheme, Study sponsorship scheme to the right candidates. Interested candidates should send FULL RESUME with Current & Expected salary.

All information provided by applicants will be treated in strict confidence and used only for recruitment purposes.