Hong Kong Job Consulting
(Senior) Technology Risk Manager (Cyber Security Control Division)
- Compensation
- Not disclosed
- Location
- Hong Kong, Hong Kong SAR, Hong Kong
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Full description
A reputable China-based Bank in Hong Kong is looking for a high-caliber (Senior) Technology Risk Manager to join her Cyber Security Control Division
ResponsibilitiesApplication Security:
- Assist in reviewing IT initiatives and provide advisory from technology risk perspectives
- Assist to establish and review policies, guidelines, procedures in application security area
- Provide advisory and practical guidance to support technology risk and information security assessments, include vulnerability scanning, penetration test etc
- Conduct regular assessment on application security
- Familiar with security testing tools e.g. Fortify, AppScan and Nessus, technologies on DevSecOps and industry good practice OWASP is preferable
Cyber Security:
- Provide Cyber Security incident response operation and support.
- Experience in OSINT, malware analysis and digital forensics
- Research and evaluate on latest security threats and Cyber Threat Intelligence
- Participate in Red & Purple Teaming exercises
- Familiar with technologies on Firewall, IDS, IPS, SIEM, SOAR and Network/Cloud Infrastructure is preferable
Platform Security:
- Research and evaluate latest trend & technologies on information security and fintech area, such as FinTech, Artificial Intelligence, Big Data, Cloud Computing etc
- Conduct regular assessment on data center security
Job Requirements
- Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline
- Over 2 years of experience in IT security, technology risk, risk management, compliance or IT audit function, gained from other sizable financial institutions
- Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CRISC is preferable
- Familiar with HKMA TM-E-1, PCI-DSS, ISO 2700-series or other security risk management framework is an advantage
- Good command of written and spoken English with Mandarin is preferable and
- Good communication and interpersonal skills
Interested parties please send your resume inword format with current & expected salary and notice period to parami@hkjobc.com. For details, please feel free to contact Parami on 6365 3508.