Senior Technology Risk Manager /Technology Risk Manager (Cyber Security Control Division)

Job No.: 499547
Employment Type: Full time
Departments: Information Technology Department
Job Functions: Information Technology

Responsibilities:

• Provide Cyber Security incident response operation and support.
• Experience in arrangement and co-ordination of cross-countries cyber incident response drills.
• Experience in Security operations, managing SOC, Offensive security, Container security,  Threat Hunting, OSINT, Dark Web monitoring, Malware analysis, SecOps , Digital forensics , Attack surface management, Anti-DDoS solution, AI/LLM security, Threat modeling, Supply chain cybersecurity, Vulnerability management and Bug bounty programs.
• Research and evaluate on latest security threats and Cyber Threat Intelligence.
• Participate in Red & Purple Teaming exercises and relevant validation controls.
• Familiar with technologies on Firewall, IDS, IPS, WAF, DNS Security, Email Security, Endpoint Security, SIEM, SOAR, DLP, UEBA, BAS, XDR, Deception, Generative AI/Machine Learning, Zero Trust, Micro-segmentation and Network/Cloud Infrastructure are preferable.

Job Requirements:

• Degree holder in Computer Science or other degree majoring in Information Systems, or related discipline.
• Over 5 years of experience in IT security, technology risk management, compliance or IT audit function, gained from other sizable financial institutions
• Holding at least one recognized professional qualification under HKMA enhanced competency framework such as CISA, CISSP, CISM. Industry-recognized cyber security certifications ,such as OSCP/OSCE/OSWE/OSEE/GXPN/GPEN/GCPN/GCIH/GSOC/ GCFA/OSDA, is preferable
• Familiar with HKMA TM-E-1, TM-C-1, TM-G-1, C-RAF, PCI-DSS, ISO 27001, PDPO, NIST, MITRE ATT&CK, OWASP,  Protection of Critical Infrastructures (Computer Systems) Bill or other security risk management framework or regulatory requirements is an advantage
• Good command of written and spoken English with Mandarin is preferable and
• Good communication and interpersonal skills.