---

Introduction:

Monitor security administration on application logical access and identity management, hardening, security monitoring and vulnerability management

Responsibilities:

• Develop information security policies / BCP plan / manuals and procedures
• Monitor security administration on application logical access and identity management, hardening, security monitoring and vulnerability management
• Define and design security setup, access control matrix, and control reviews
• Conduct IT security risk assessment /3rd party cybersecurity reviews
• Perform regulatory compliance assessment and reporting
• Act as 2LOD contact point on operational risk and compliance activities
• Coordinate with external / internal auditors on audit matters and follow up audit findings.
• Conduct security incident handling, investigation and reporting
• Maintain security incident response plan and playbook. Conduct regular security incident response drill

Requirements:

• University degree or above in Computer Science. Cybersecurity or related discipline
• Minimum 5 years of experience in information security in banking sector
• Strong knowledge in security related framework/standards, such as PCI-DSS, PDPO, GDPR, MITRE ATT&CK
• Strong knowledge of banking regulation on technology risk management and cyber security
• Knowledge of secure coding best practices, source code review, and internet threat vectors such as OWASP top 10
• Technical knowledge in network / server / OS / Databases / security / banking applications
• Can work independently and a good team player
• May occasionally be required to work outside regular office hours
• Good command of written and spoken in English and Chinese (preferably fluent in Mandarin)
• Holder of CISA/CISSP/CISM or other recognized certificate