Job Responsibilities:

• Conducting IT security monitoring & security assessment for network, systems and applications;
• Identify inefficiencies and control weaknesses, explore methods for improvement and provide recommendations;
• Provide proactive consultative advice that leads to improvements in risk control and governance systems;
•  Management and follow up of IT Audit issues;
•  Perform business continuity and disaster recovery planning and execution.

Job Requirements:

• Bachelor’s degree or equivalent in Computer Science or a related subject from an accredited institution;
• Holder of CISSP, CISM or CISA preferred;
• At least 3 years of experience in information security, cyber security, IT risk & compliance and related project management areas;
• Experience in dealing with SFC’s related matters is a big advantage;
• Familiar with the theories and requirements of enterprise information security, cloud security, network security, application security, cryptographics and key management etc.;
• Familiar with the theories and operations of security devices such as WAF, EDR, SOAR, anti-DDoS, UEM, VPN, IPS, firewall etc.;
• Familiar with the use of penetration testing and vulnerability scanning tools;
• Experience on container security, DevSecOps, microservice architecture security and CI/CD pipeline controls are a plus.

China Merchants Securities International Co., Limited (“we”), wholly owned by China Merchant Securities Company Limited (Stock Code: 6099.HK/600999.SH), is principally engaged in the provision of a wide range of financial services including brokerage, corporate financing, sales and trading, leveraged and structured lending, asset management, private equity, global commodities and futures. We are searching high caliber talents to help develop and take part in the growth of our business.