Manager

Job Responsibilities

Ÿ    Act as a key role on performing vulnerability assessment to the Bank’s IT system.

Ÿ    Follow the regulatory requirements on security such as HKMA Cybersecurity Fortification Initiatives (CFI) requirements so as to wider the security protection perspectives of the Bank.

Ÿ    Perform system and network configuration hardening reviews to ensure the system and network security of the Bank.

Ÿ    Assist in implementation of the Information or Cyber security solutions for cyber security protection perspectives.

Ÿ    Technical support and administrative on Bank’s security related systems.

Ÿ    Handle the reported security related matters and report to security team leader for the follow-up status.

Ÿ    Assist to maintain and administrative on all Bank’s policies, procedures and guidelines regarding to information and cyber security.

Ÿ    Perform daily security monitoring on the Bank’s IT system.

Job Requirement

l   Minimum 2 years relevant working experience in IT administration, Information Security

l   Basic understanding in Information / cyber security controls and reviews to ensure the adequate controls and the adherence to Security Policies and Standards of the Bank.

l   Basic Understanding on the regulatory requirements such as HKMA SPM, Cybersecurity CFI, SFC, PCI-DSS and etc.

l   Basic concepts on software / application whitelisting, APT protection and relevant solutions.

l   Experience and understanding on privileged account management, vulnerability scanning, system and network hardening.

l   Basic understandings in Cyber Security principles, Information security risk managements & controls.

l   Knowledge on firewall, router, switch, IPS/IDS, VPN, Database, Windows / Linux / AIX platforms, patch management, key / certificate management.

l   Understanding of the banking systems and applications are preferred.

l   Good command of written and spoken English and Putonghua

Education & Professional Qualifications

l   Degree holder in Computer Science or Engineering (or related Disciplines)

l   CISA / CISM / CISSP or equivalent is preferred