Cyber Security Operations Professional

China Construction Bank (Asia); Hong Kong; On-site; HKD 500,000 - 700,000; Full time

Job summary

A large financial institution in Hong Kong is seeking a seasoned cybersecurity professional to manage security operations. Key responsibilities include incident response, vulnerability management, and technical support for cross-border teams. The ideal candidate should hold a degree in Cyber Security, possess at least 5 years of experience in the field, and have a strong command of Mandarin. Relevant certifications like CISSP or CEH are preferred. Interested applicants should submit their resumes to the provided email address.

Qualifications

• Minimum 5 years experience in cybersecurity operations or related fields.
• Experience in the financial industry preferred.
• Good command of written and spoken Mandarin required.
• Professional certifications such as CISSP, CEH preferred.

Responsibilities

• Conducts technical monitoring of cyber-attacks and data leaks.
• Responsible for emergency response to cybersecurity incidents.
• Manages lifecycle of IT infrastructure vulnerabilities.
• Provides guidance on cybersecurity management systems.
• Supports overseas institutions during cybersecurity incidents.

Skills

Cybersecurity operations

Incident response

Communication skills

Crisis management

Technical support

Cross-border collaboration

Education

Degree in Cyber Security or related discipline

Tools

SIEM

Threat intelligence platforms

Vulnerability scanners

Endpoint security tools

Network security tools

Job description

Overview

Main Responsibilities - Security Operations: Conducts technical monitoring of internal/external cyber-attacks, data leaks, endpoint threats, and external frauds. Responsible for the maintenance and optimization of security products/tools and devices, and the development of security operation management systems.

Responsibilities

• Security Incident Response: Responsible for emergency response to cybersecurity incidents, including attack analysis, forensics and investigation, and reporting. Organizes and participates in cyber incidents drills.
• Vulnerability & Threat Intelligence Management: Manages the full lifecycle of IT infrastructure and application vulnerabilities. Responsible for the collection, analysis, and management of threat intelligence, integrating with asset data for rapid threat warning.
• Security Technical Support & Implementation: Responsible for security configuration and checks during information system deployment. Participates in research and testing of new security technologies and products.
• Provides guidance to institutions such as Macao, Taiwan, Japan, South Korea, and Vietnam on enhancing their cybersecurity operation management systems, including solution implementation, vulnerability detection, and security monitoring.
• Responsible to support and provide guidance on cybersecurity incident response and for cybersecurity incidents occurring at overseas institutions. May be dispatched on-site for support if required.
• Performs other cybersecurity operation duties as assigned.

Qualifications

• Degree holder in Cyber Security, Computer Science, Information Technology, or a related discipline.
• Minimum 5 years of experience in cybersecurity operations, security monitoring, incident response, or related fields. Experience in the financial industry is preferred.
• Solid technical foundation in security operations, familiar with tools such as SIEM, threat intelligence platforms, compliance and vulnerability scanners, endpoint security, network security, host security, threat intelligence platforms, etc.
• Familiar with cybersecurity incident response frameworks and the vulnerability management lifecycle.
• Excellent cross-team communication and crisis management skills, with the ability to work under pressure.
• Professional certifications such as CISSP, CEH, GCIH, Security+ are preferred.
• Good command of written and spoken Mandarin is a must.
• Experience in cross-border collaboration, remote or on-site technical support is a significant advantage.

Application

To apply, please submit your application along with your resume to [e-mail]. Applicants who are not contacted within 8 weeks may consider their applications unsuccessful and their personal data will be retained by the bank for a period up to two years.

All information provided by applicants will be used for recruitment purposes only and will be used strictly in accordance with the bank’s personal data policies, a copy of which will be provided upon request.