IT Manager, Security and Compliance Administration

Industrial and Commercial Bank of China (Asia) Limited; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Industrial and Commercial Bank of China (Asia) Limited is hiring an IT Manager to lead and manage security initiatives. You will oversee Cyber Security protection and ensure comprehensive safety for all company systems and data.

The ideal candidate should have over 5 years of experience in Cyber security, possess relevant ECF-C certifications, and be familiar with various security tools. Excellent communication skills in English and Chinese, including Putonghua, are essential.

Qualifications

• 5 years or above experience in Cyber security protection.
• Master at least one programming language such as C, JS, Python, PHP, Java.
• Deep understanding of network security, system security, and application security.

Responsibilities

• Lead and manage IT Security and Cyber Security protection.
• Conduct safety assessment tests on the company’s systems.
• Respond to company security incidents and analyze attack paths.

Skills

Cyber security protection

Knowledge of security vulnerabilities

Familiarity with security tools

Team spirit and communication skills

Education

Bachelor Degree or above with ECF-C certifications

Tools

Kali Linux

Metasploit

Nessus

Nmap

Burp

Appscan

Job description

IT Manager, Security and Compliance Administration

Industrial and Commercial Bank of China (Asia) Limited

Lead and manage the company’s IT security and cyber security initiatives, ensuring comprehensive protection for all systems and data.

Job Responsibilities

• Plan, lead and manage IT Security and Cyber Security protection.
• Responsible for safety reinforcement for various systems of the company.
• Conduct safety assessment tests (black box and white box) on the company’s website and business system.
• Respond to company security incidents, clear back doors, and analyze attack paths according to logs.
• Carry out security technology research, including security prevention technology and hacker technology.
• Organize and implement regular vulnerability scanning, penetration testing, security drills, offensive and defense drills, etc.

Job Requirements

• Bachelor Degree or above with one of the ECF-C certification: CISSP, CISA, CISM, CRISC, CEH.
• 5 years or above experience on Cyber security protection.
• Familiar with attack and defense technology, including SQL injection, XSS, CSRF, command execution and other security vulnerabilities and defense.
• Familiar with mainstream security tools, including Kali Linux, Metasploit, Nessus, Nmap, AWVS, Burp, Appscan, etc.
• Familiar with Linux/Windows, Apache, Nginx, LAMP/LNMP, Oracle/MySQL.
• Deep understanding of network security, system security, application security, web security as a whole with certain code audit and vulnerability analysis and mining capabilities.
• Master at least one programming language C, JS, Python, PHP, Java, etc.
• Familiar with IPS, WAF, UEBA, SIEM, Honeypot.
• Strong team spirit and sense of responsibility with good documentation and communication skills.
• Good command of spoken and written English and Chinese, including Putonghua.

Please submit your resume to [e-mail].