IT Information Security Manager (Secondment Contract) (Ref no: ITISM-AL)

Nanyang Commercial Bank Ltd.; Hong Kong; Vor Ort; HKD 900.000 - 1.300.000; Vollzeit

Zusammenfassung

Nanyang Commercial Bank Ltd. in Hong Kong is seeking an experienced IT Information Security Manager to lead architecture planning, security governance, and incident response for the bank's information systems.

The role requires at least five years in banking information security, strong hands-on and leadership skills, and certifications; candidates with higher experience may be considered for senior level.

Qualifikationen

• 5+ years of experience in banking information security.
• Hands-on experience with security testing and defense.
• Strong knowledge of security architecture and governance.

Aufgaben

• Architecture Planning & Implementation: design bank-wide security architecture and review solutions for new systems.
• AI Security Operations Tool Design & Enablement: research and implement AI/LLM in security operations and automate tooling.
• Security Governance, Compliance & Audit: maintain security policies, standards and SOPs, coordinate with Risk/Audit.
• Daily Security Operations & Incident Response: monitor security posture and lead incident response and drills.

Kenntnisse

Red/Blue team experience

Offensive security

AI/LLM basics

Security lifecycle

Log parsing & risk analysis

Ausbildung

Bachelor's degree or above in IT/CS

Jobbeschreibung

• Review security solutions for new systems
• Min. of 5 yrs of exp
• Conduct periodic assessments

Accumulating over 70 years experience on our solid foundation in Hong Kong and Greater China, we succeed and create our brilliant story throughout the region. As the first foreign bank branch in Mainland, we grasp the opportunity to grow along with the economic reforms. With our well-versed China business intelligence, we continue to expand our network proactively but prudently.

Inheriting our “People Focus” tradition, we strongly believe in the philosophy of talent investment. Here, we respect your career development with enormous support and room for inspiration. If you are ready to go for great, join us today. You can shine with your own glorious story.

Your talent is our treasure, come to explore your potential with us.

Job Responsibilities

• Architecture Planning & Implementation: Design and optimize the bank-wide information security technical architecture, including defense-in-depth strategies and cybersecurity defense systems. Review security solutions for new systems and major change projects to ensure alignment with business system development. Conduct periodic assessments of existing security architecture, identify vulnerabilities, and lead implementation of hardening roadmaps.
• AI Security Operations Tool Design & Enablement: Research and implement AI/LLM applications in security operations (e.g., PoC, scenario-based solutions). Develop automated tools for log parsing, risk analysis, compliance verification, and operational efficiency optimization. Lead AI-driven initiatives (e.g., intelligent alert classification, security rule streamlining, sensitive data identification).
• Security Governance, Compliance & Audit: Maintain and enhance the bank’s information security management system (policies, standards, SOPs). Conduct system security compliance checks, data protection assessments, and collaborate with Risk/Audit departments. Develop remediation plans for vulnerabilities, internal control gaps, and audit findings, ensuring full resolution.
• Daily Security Operations & Incident Response: Monitor and analyze the bank’s cybersecurity/data security posture (e.g., correlation analysis, attack path tracing).Lead incident response, cyber drills, and post-incident reviews (PIR) for major security events. Continuously improve security monitoring capabilities and threat detection frameworks.

Job Requirements

• Bachelor’s degree or above in Information Technology, Computer Science, or related disciplines;
• Minimum of 5 years of experience in banking information security;
• Technical skills required for the job position: Hands-on experience in Red/Blue team exercises and offensive security (e.g., SQL injection, XSS, privilege escalation, CC attacks). Foundational knowledge of AI/LLM and experience in security design/auditing. Full lifecycle management of information security products/services (procurement, implementation, O&M).5+ years in security tool operation and rule formulation (e.g., log parsing, risk analysis, compliance verification);
• Soft skills requirements: Strong strategic planning and cross-functional collaboration skills. Proven ability to drive innovation in AI-driven security solutions. High adaptability in dynamic, high-pressure environments;
• Passed in HKMA-recognized information security certifications (e.g., CISSP, CISM, CISA) is a must;
• Proficiency in both written and spoken English, Chinese and Putonghua;

Candidate with more experience will be considered for Senior IT Information Security Manager.

We are an Equal Opportunities Employer. Data collected would be used for recruitment purposes only. Applicants who do not hear from us within 8 weeks may consider their applications unsuccessful and their data will be destroyed within 24 months of receipt.