Manager / Assistant Manager, Information Security

Responsibilities:

• Monitor and analyze security events and logs, promptly identify potential threats or attacks, and coordinate timely response actions.
• Track emerging cybersecurity threats, vulnerabilities, and security technologies to continuously enhance the Bank’s security posture.
• Conduct regular vulnerability scanning, penetration testing, source code scanning, and security assessments to identify weaknesses and drive remediation.
• Support internal and external security audits, compliance checks, and regulatory assessments.
• Assist in maintaining and improving security monitoring operations, including SIEM, EDR, and firewall rule management.
• Perform other duties and responsibilities as assigned by the IT Security team.

Requirements:

• Degree holder in Computer Science, Information Systems, or related disciplines.
• Minimum 5 years of experience in information security, preferably in banking, financial services, or regulated environments.
• Hands-on experience with vulnerability scanning, log analysis, penetration testing, and monitoring operations.
• Solid knowledge of mainstream operating systems (Windows, Linux, AIX), network protocols, and common security devices (IPS, WAF, firewalls, EDR, SIEM).
• Security certifications such as CISSP, CISM, CISA, GPEN, or CEH are preferred.
• Strong analytical skills, good communication abilities, and a collaborative teamwork spirit.
• Candidates with less experience may be considered for Assistant Manager.

We offer competitive remuneration commensurate with candidate’s background. If you look for a friendly and harmonious working environment with steady career progression, here is the right opportunity for you. Please submit your full resume with current and expected salary to the Human Resources Division by clicking “APPLY NOW” or visiting https://www.shacombank.com.hk/eng/about/career/Career.jsp.

We are an equal opportunity employer.

Applicants who are not contacted within 8 weeks may consider their application unsuccessful. Applications may be retained for 24 months for consideration of other suitable openings.

All personal data collected will be used for recruitment related purposes strictly in accordance with the Bank's personal data policies, a copy of which will be provided upon request by contacting our Personal Data Compliance Officer.