Analyst (Information Security) (Two-year Programme)
Junior information-security analyst on a two-year talent development programme at Hong Kong's interbank clearing/settlement operator. Day to day: identity & access management, SOC alert triage, threat intel, key/certificate inventory, vulnerability scanning and pentest coordination, plus scripting for security automation.
- Compensation
- Not disclosed
- Location
- Ngau Tau Kok, Kwun Tong District
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- University degree, preferably in information technology, information security or related discipline
- 1-2 years of experience in information security or computer operations; fresh graduates welcome
- Team player with sound interpersonal, communication, presentation and analytical skills
- Good command of written and spoken English and Chinese
- Willing to work shift duty (evening shift normally 12:30-21:30 with shift allowance)
Nice to have
- Security certification such as CISA or equivalent is an advantage
- Experience/knowledge in risk management frameworks and public/private cloud security is an advantage
Full description
Hong Kong Interbank Clearing Limited
Hong Kong Interbank Clearing Limited (hereinafter referred to as “the Company”) is a private organization jointly owned by the Hong Kong Monetary Authority (HKMA) and The Hong Kong Association of Banks. The Company’s key objective is to develop and operate a safe and efficient multi-currency and multi-dimensional financial infrastructure in Hong Kong for:
- large-value interbank fund transfers denominated in HKD, USD, Euro and RMB;
- interbank money settlement of equity and debt securities transactions in Hong Kong via the linkages with the Hong Kong Securities Clearing Company Limited and the HKMA’s Central Moneymarkets Unit (CMU) system;
- small-value interbank fund transfers denominated in HKD and RMB via the HKD and RMB Faster Payment System; and
- interbank clearing and/or money settlement of paper cheques and various types of electronic payments in Hong Kong.
The Company is also the operator of the HKMA’s CMU system.
Apart from interbank clearing-and-settlement services, the Company and its subsidiaries also support the HKMA and the financial industry to foster the development of the financial technology (“FinTech”) ecosystem in Hong Kong.
We are looking for a suitable candidate to take up the following job position.
Analyst (Information Security) (Two-year Programme)Major Responsibilities
- Assist in user identity and access management, including provisioning, deprovisioning, and lifecycle management for standard and privileged accounts
- Assist the security management team in handling alerts from the Security Operations Centre (SOC), including initial alert triage, incident logging, and response coordination under senior guidance
- Assist in cyber threat intelligence gathering and analysis, leveraging SOC data to proactively identify emerging threats and strengthen defensive postures
- Maintain key and certificate inventory records, track expiration dates, and assist with routine renewals and revocations per security policies
- Assist supervisors to run scheduled vulnerability scans using approved tools, document findings, and help track remediation progress with IT and system owners
- Support penetration testing initiatives by assisting with scoping documentation, coordinating test environments, and tracking vulnerability remediation
- Assist in security reviews for new projects by checking system configurations against baseline standards and helping monitor control implementation
- Review open-source software and freeware for known vulnerabilities, licensing compliance, and alignment with organizational security guidelines