Talent.com
This job offer is not available in your country.
Information and Technology Manager (Security Management) (Ref : ISD-AL)

Information and Technology Manager (Security Management) (Ref : ISD-AL)

Nanyang Commercial BankHong Kong
30+ days ago
Job description

Job Responsibilities :

  • Assess the information security risks of new projects and propose mitigation measures;
  • Design and implement cyber defense plan that is consistent with the Group and complies with the requirements of the Hong Kong Monetary Authority;
  • Responsible for daily information security operation and maintenance, including security event monitoring, security detection rule design, security cases following up and report progress regularly, account management, security vulnerability management, penetration test and other regular information security work;
  • Coordinate internal and external audits of materials related to information security;
  • Initiate regular information security health check and cybersecurity drilling.

Job Requirements :

  • Bachelor’s degree or above in Information Technology or related disciplines;
  • Experience in banking, IT or information security is required with minimum 5 years experience in directly operating security tools and setting security rules;
  • Holder of information security professional qualifications recognized by the Hong Kong Monetary Authority (such as CISSP / CISM / CISA / CSX-S / CSX-E / CCSP / CRT / CCT Infra / CCT Web App / CCSAS / CCSAM) is a must;
  • Participated in writing information system security or technology risk management in policies, procedures and standards.
  • Working  experience in participating simulated cyber attack drill as a red or blue team members, and have certain attacking experience including but not limited to various types of SQL injection, Buffer Overflow, Cross-Site scripting, sniffing, Anti-virus trojan detection bypass, Privilege Escalation, CC attack, Lateral penetration, Vulnerability Mining, etc.
  • Create a job alert for this search

    Information Security • Hong Kong