---

Introduction:

Our client is one of the biggest group in Hong Kong

Responsibilities:

Security Assurance, the role will be responsible for performing security testing for our own software products and web applications.

Work with application team in corporate office and Business Units (BUs) to deploy the application code scanning tool. Ensure software codes are secure and web applications are not vulnerable to attacks. Manage an efficient CI/CD pipeline while offering multi-unit visibility requires version control.

Review BUs information security risk assessment and perform onsite security assessment on oversea BUs, aim to identify potential security risks, provide assurance and recommendation.

Assist BUs to apply security exception if non-compliance with company policy.

Monitor and review regularly compliance with risk management strategies and practices that BUs activities and processes are meeting required standards.

Ensure the effective and timely reporting and escalation of risk.

Launch security awareness program in corporate office and BUs in a regular basis.

Requirements:

University graduate from an IT discipline such as Computer Science/Engineering with relevant professional certifications

At least 7 years of relevant experience gained from sizeable corporations with regional or global exposure

Relevant professional certifications (such as CISSP, CISA, CISM, etc.) preferred

Sound knowledge and understanding of latest security tools, cloud-based systems, hardening, cryptographic and certification management, applications testing and practices, as well as current and relevant legal legislations and industry standards

An effective communicator with people at all levels, with excellent command of both written and spoken English a must. Additional language proficiency an advantage

Strong people skills who can juggle conflicting priorities and agenda

Highly self-initiated, organised and systematic; a keen eye on details without losing sight of the bigger picture, enabled by a sharp, analytical mind

Overseas travel might be required for onsite security assessment