安全合规工程师 Security Compliance Engineer

Futu Securities; Hong Kong; On-site; HKD 900,000 - 1,300,000; Full time

Job summary

Futu Securities in Hong Kong is seeking a qualified Information Security professional to lead security policy development and regulatory readiness. You will design and enforce security controls, oversee audits, and coordinate with regulators to ensure ongoing compliance.

The role requires a degree in CS/Info Security, familiarity with ISO 27001 and PCI DSS, and strong IT risk governance skills to support business units in implementing compliant security solutions.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or related field.
• Familiar with information security standards and frameworks such as ISO 27001 and PCI DSS.
• Solid understanding of IT risk governance and tracking methodologies.

Responsibilities

• Develop security policies and management systems; coordinate with regulatory inspections.
• Perform regular security and IT system audits and compliance checks.
• Assist business units in implementing compliant security solutions.

Skills

Information security

IT risk governance

Regulatory compliance

Internal audits

Regulatory inspections coordination

Education

Bachelor's degree in Computer Science / Information Security

Tools

Audit tools

Job description

Responsibilities:

• Responsible for the development of company security policies and management systems, conducting internal audits, and coordinating with regulatory inspections to ensure security compliance.
• Perform regular security audits, IT system audits, and compliance checks to validate the effectiveness of information security controls, analyze root causes, and drive risk remediation.
• Apply data security compliance knowledge, interpret regulatory requirements, and assist business units in implementing compliant security solutions.
• Bachelor's degree or higher in Computer Science, Information Security, or related field.
• Familiar with information security standards and frameworks such as ISO 27001 and PCI DSS.
• Solid understanding of IT risk governance and tracking methodologies, with knowledge of corporate IT risk management and internal control processes.

Nice-To-Have:

• Experience in the financial industry, with hands-on experience with Web3/blockchain regulatory audits.
• Hold international security certifications, such as CISSP, CISM, or CISA is a plus