AVP/VP, Cybersecurity Engineer, Financial Technology

BOC International Holdings Ltd; Hong Kong Island; On-site; HKD 900,000 - 1,500,000; Full time

Job summary

BOC International Holdings Limited is seeking an AVP/VP Cybersecurity Engineer to lead security protection and daily management of the company’s network and information systems, ensuring stable and secure operations in a finance-focused environment.

The role emphasizes monitoring security events, conducting vulnerability assessments, and driving remediation, with strong emphasis on regulatory alignment in HK. Multilingual communication in English, Cantonese and Mandarin is required.

Qualifications

• Bachelor's degree or above in Computer Science, Information Security, Network Engineering, or related fields.
• At least 5 years relevant experience in cybersecurity or information security.
• Familiar with vulnerability scanning, security assessments, log analysis, and security monitoring operations.
• Knowledge of Linux/Windows, network protocols, and common security devices such as firewalls, IDS/IPS, and WAF.
• Familiarity with HK regulatory requirements and industry standards (HKMA, SFC) preferred.
• Strong analytical and problem-solving skills for handling security incidents.
• Proficiency in English, Cantonese, and Mandarin.
• Security certifications such as CISSP, CISM, CISA, or CEH are preferred.

Responsibilities

• Responsible for security protection and daily management of the company's network and information systems to ensure stable and secure operations.
• Monitor and analyze security events and logs, identify threats, and respond to incidents promptly.
• Conduct regular vulnerability scanning, security assessments, and penetration testing to drive remediation.
• Participate in development and optimization of cybersecurity policies, standards, and procedures.
• Establish and improve incident response mechanisms and participate in investigations.
• Track emerging threats and defensive technologies to enhance security posture.
• Support internal and external security audits and compliance checks.
• Perform other duties as assigned by the team.

Skills

Cybersecurity

Threat monitoring

Incident response

Vulnerability scanning

Log analysis

Security monitoring operations

Network security

Multilingual communication

Education

Bachelor's degree in Computer Science / Information Security / Network Engineering

5+ years relevant cybersecurity experience

HK/overseas experience advantageous

Tools

WAF

IDS/IPS

Firewalls

Job description

AVP/VP, Cybersecurity Engineer, Financial Technology

Key Accountabilities

• Responsible for the security protection and daily management of the company's network and information systems to ensure stable and secure operations;
• Monitor and analyze security events and logs, identify potential threats or attacks, and respond to security incidents in a timely manner;
• Conduct regular vulnerability scanning, security assessments, and penetration testing to identify security weaknesses and drive remediation;
• Participate in the development and optimization of cybersecurity policies, standards, and operational procedures;
• Establish and improve incident response mechanisms, and participate in investigation and handling of security incidents;
• Track emerging cybersecurity threats, vulnerabilities, and defensive technologies to continuously enhance the organization's security posture;
• Support internal and external security audits, compliance checks, and security assessments;
• Perform other duties and responsibilities as assigned by the team.

Skills & Experience

• Bachelor's degree or above in Computer Science, Information Security, Network Engineering, or related fields;
• At least 5 years relevant experience in cybersecurity or information security, with knowledge of common attack methods and security protection techniques;
• Candidates with over 2 years of full time working experience in Hong Kong or overseas is considered as an advantage;
• Familiar with vulnerability scanning, security assessments, log analysis, and security monitoring operations;
• Knowledge of mainstream operating systems (Linux/Windows), network protocols, and common security devices such as firewalls, IDS/IPS, and WAF;
• Familiarity with Hong Kong cybersecurity regulatory requirements and industry standards is preferred, such as those issued by the Hong Kong Monetary Authority (HKMA), Securities and Futures Commission (SFC), or other relevant regulators;
• Strong analytical and problem-solving skills in handling security incidents;
• Proficiency in English, Cantonese, and Mandarin is required, with the ability to communicate effectively in a multilingual working environment;
• Good communication skills and teamwork spirit;
• The stated years of working experience is the minimum requirement. Longer related experience will qualify for a higher job grade;
• Security certifications such as CISSP, CISM, CISA, or CEH are preferred.

Other Information

• The personal data provided will be used for consideration of recruitment only. All personal data of unsuccessful candidate will be destroyed within 24 months;

About BOCI

As a leading investment bank in China and Hong Kong region, the investment banking arm of Bank of China, BOC International Holdings Limited (“BOCI”), is now seeking highly motivated, creative and success-oriented professional who would like to pursue the career for supporting our group.

As a leading investment bank in China and Hong Kong region, the investment banking arm of Bank of China, BOC International Holdings Limited (“BOCI”), is now seeking highly motivated, creative and success-oriented professional who would like to pursue the career in our group.

As a leading investment bank in China and Hong Kong region, the investment banking arm of Bank of China, BOC International Holdings Limited (“BOCI”), is now seeking highly motivated, creative and success-oriented professional who would like to pursue the career in our group.