IT Operations & Security Engineer

DA International Financial Service Limited; Hong Kong; On-site; HKD 450,000 - 600,000; Full time

Job summary

DA International Financial Service Limited in Hong Kong seeks a mid‑level IT operations and cyber security professional. You will handle Help Desk escalations, manage AD/Office 365, and lead daily security monitoring and BCP/DR for HK/SG/US entities.

Responsibilities include drafting security manuals, patch management, firewall and network upkeep, and ensuring compliance with HK SFC, MAS, and IT audits. Fluent English and Mandarin, 5+ years’ experience required.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 5+ years in IT operations and cybersecurity.
• Experience with security tooling and vulnerability scans.
• Familiarity with regulatory standards (HK SFC, MAS).

Responsibilities

• IT Operations & Help Desk escalation handling.
• Maintain AD/Office 365, MDM, and basic server tasks.
• Daily security monitoring, incident response, and reporting.
• BCP/DR planning, testing, and audit evidence provision.

Skills

English Fluency

Mandarin Proficiency

Windows/mac Desktop Support

Networking Fundamentals

Firewall Configuration

Education

Bachelor's degree in CS/IT or related field

Tools

Fortinet

Palo Alto

Cisco

Nessus

OpenVAS

EDR

SIEM

Job description

We are seeking a mid-level technical professional with a solid foundation in IT operations and hands-on cyber security experience. As a core member of the group's IT team, this role will handle escalated IT support (Help Desk) and basic system/network maintenance. More importantly, this role will be independently responsible for daily security monitoring, drafting security manuals, and maintaining/executing BCP/DR plans for our three financial brokerage entities (HK, SG, US), ensuring daily IT operations comply with foundational financial security and regulatory standards.

Key Responsibilities

1.IT Operations & Escalated Support (Help Desk & Operations):

Resolve escalated IT issues, including complex desktop troubleshooting, network connectivity issues, and in-depth troubleshooting of office software.

Independently manage enterprise IT infrastructure, including Active Directory (AD), Office 365 tenant administration, Mobile Device Management (MDM), and basic server maintenance.

2.Cyber Security & Daily Monitoring (Cyber Security & Monitoring):

Independently draft, update, and maintain the group's cyber security manuals, IT operational procedures, and user security guidelines.

Conduct daily security monitoring, including reviewing firewall logs, managing antivirus/EDR consoles, triaging security alerts, and executing regular vulnerability scans and patch management.

Act as the first responder for security incidents, handling medium‑complexity events (e.g., phishing email analysis, malware isolation) and drafting incident reports.

3.Business Continuity & Disaster Recovery (BCP & DR):

Responsible for writing and updating BCP and DR plan documentation for core business systems.

Independently plan, coordinate, and lead regular backup restoration tests and DR drills, evaluate the results, and report improvement recommendations to management.

4.Basic Network & Compliance Management:

Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.

Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.

Requirements

Bachelor's degree in Computer Science, Information Technology, or a related field required. Over 5 years of combined experience in IT operations and cyber security.

Fluent in both English and Mandarin.

Proficient in Windows/Mac desktop support. Solid networking foundation, capable of independently configuring and managing enterprise firewalls (e.g., Fortinet, Palo Alto, Cisco), switches, and routers.

Familiar with the operation of mainstream security tools, such as Antivirus/EDR, vulnerability scanners (e.g., Nessus, OpenVAS), and basic SIEM log analysis. Understand common cyberattack vectors.

Familiar with the basic requirements of ISO 27001, SOC 2, or financial industry IT audits.

Sheung Wan, Central and Western District, HK