Cybersecurity & Compliance IT Manager

Industrial and Commercial Bank of China; Hong Kong; On-site; HKD 600,000 - 1,000,000; Full time

Job summary

Industrial and Commercial Bank of China (Asia) Limited (ICBC (Asia)) is seeking an experienced cybersecurity professional to lead IT security and protection initiatives across its systems in Hong Kong. The role focuses on risk assessment, vulnerability management, and incident response to safeguard digital assets.

You will conduct security testing, monitor threats, and collaborate with IT teams to implement preventive controls, with emphasis on resilience and regulatory compliance.

Qualifications

• Bachelor Degree or above with one of the ECF-C certifications: CISSP, CISA, CISM, CRISC, CEH
• 5 years or above experience in cyber security protection
• Familiar with attack and defense technologies and common vulnerabilities such as SQL injection, XSS, CSRF
• Familiar with mainstream security tools listed (Kali Linux, Metasploit, Nessus, Nmap, AWVS, Burp, Appscan)
• Proficient in Linux/Windows servers and web technologies (Apache, Nginx, LAMP/LNMP, Oracle/MySQL)
• Strong programming capability in at least one language (C/JS/Python/PHP/Java/JS)
• Familiar with IPS/WAF/UEBA/SIEM/Honeypot
• Excellent documentation and communication in English and Chinese, including Putonghua

Responsibilities

• Plan, lead and manage IT security and cyber security protection
• Reinforce safety for company systems and websites
• Conduct security assessments (black box/white box) and respond to incidents
• Clear back doors, analyze attack paths from logs
• Carry out security research including prevention and hacker technologies
• Organize regular vulnerability scanning, penetration testing, drills and exercises

Skills

C

Java

Python

JavaScript

PHP

Education

Bachelor Degree or above with CISSP/CISA/CISM/CRISC/CEH

Tools

Kali Linux

Metasploit

Nessus

Nmap

AWVS

Burp

Appscan

Job description

Industrial and Commercial Bank of China (Asia) Limited (ICBC (Asia)) is seeking an experienced cybersecurity professional to lead IT security and protection initiatives across its systems in Hong Kong. The role focuses on risk assessment, vulnerability management, and incident response to safeguard digital assets.

You will conduct security testing, monitor threats, and collaborate with IT teams to implement preventive controls, with emphasis on resilience and regulatory compliance.