<p><strong><u>Job Responsibilities:</u></strong></p><ul><li><p>Evaluate cybersecurity risks for new initiatives and recommend risk mitigation strategies.</p></li><li><p>Develop and execute a cyber defense strategy aligned with Group policies and HKMA regulatory requirements</p></li><li><p>Oversee daily security operations, including:</p><ul><li><p>Monitoring security incidents</p></li><li><p>Designing threat detection rules</p></li><li><p>Investigating and tracking security cases</p></li><li><p>Managing user access controls</p></li><li><p>Addressing security vulnerabilities</p></li><li><p>Conducting penetration tests, and</p></li><li><p>Performing other routine security tasks</p></li></ul></li><li><p>Facilitate internal and external audits related to information security documentation</p></li><li><p>Conduct periodic security assessments and organize cybersecurity drills</p></li></ul><p></p><p></p><p><strong><u>Job Requirements:</u></strong></p><ul><li><p>Bachelor’s degree or above inInformation Technologyor related disciplines</p></li><li><p>Experience in banking, IT or information security is required with minimum5years experience in directly operating security tools and setting security rules</p></li><li><p>Holder of information security professional qualifications recognized by the Hong Kong Monetary Authority (such asCISSP/CISM/CISA/CSX-S/CSX-E/CCSP/CRT/CCT Infra/CCT Web App/CCSAS/CCSAM) is a must</p></li><li><p>Participated in writing information system security or technology risk management in policies, procedures and standards</p></li><li><p>Workingexperiencein participating simulated cyber attack drill as a red or blue team members, and have certain attacking experience including but not limited to various types of SQL injection, Buffer Overflow, Cross-Site scripting, sniffing, Anti-virus trojan detection bypass, Privilege Escalation, CC attack, Lateral penetration, Vulnerability Mining, etc.</p></li></ul><p></p>