IT Security Manager: Vulnerability & Compliance Lead

CMB Wing Lung Bank Limited; Hong Kong; On-site; HKD 420,000 - 640,000; Full time

Job summary

CMB Wing Lung Bank Limited is seeking a capable security professional to join our IT security team in Hong Kong. The role focuses on vulnerability assessment, system hardening, and implementing cyber security solutions to protect the Bank’s IT environment.

The candidate will monitor daily security operations, support security policy execution, and ensure compliance with HKMA cybersecurity requirements and other applicable standards.

Qualifications

• 2+ years of IT security or information security experience.
• Good understanding of security controls and policies.
• Familiarity with HKMA CFI, SPM, SFC, PCI-DSS guidelines.
• Knowledge of whitelisting, APT protection, vulnerability scanning.
• Experience with privileged account management and patch management.
• Basic cyber security principles and risk management.

Responsibilities

• Perform vulnerability assessments on the Bank’s IT systems.
• Follow HKMA CFI and other regulatory requirements.
• Conduct system and network hardening reviews.
• Assist in implementing cyber security solutions.
• Provide technical support for security-related systems.
• Handle security incidents and report to the security team leader.
• Maintain Bank policies and guidelines on information security.
• Perform daily security monitoring on IT systems.

Skills

Vulnerability assessment

IT administration

Information security controls

Regulatory compliance

Firewall/IPS/IDS

System hardening

English and Putonghua

HKMA CFIs / SPM / PCI-DSS

Education

Bachelor's degree in Computer Science or Engineering

Tools

Windows

Linux

AIX

VPN

Databases

Job description

CMB Wing Lung Bank Limited is seeking a capable security professional to join our IT security team in Hong Kong. The role focuses on vulnerability assessment, system hardening, and implementing cyber security solutions to protect the Bank’s IT environment.

The candidate will monitor daily security operations, support security policy execution, and ensure compliance with HKMA cybersecurity requirements and other applicable standards.