Section Head, IT Security & Network

Chong Hing Bank Limited; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Benefits offered by this job

Medical Plan

Dental Plan

Discretionary Bonus

Annual leave and family medical plan

Job summary

Chong Hing Bank Limited is seeking a Senior IT Security Manager in Hong Kong to lead the cyber security program, develop risk control frameworks, and ensure protection of the bank's IT infrastructure. You will guide policy, processes and people to mitigate cyber risks and guard against cyber attacks.

The role requires 13+ years in IT security management with at least 8 years in a managerial capacity, familiarity with security platforms, and CISSP or related certification is preferred.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• 13+ years in IT security management with at least 8 years in a managerial role.
• Familiar with LAN/WAN, telephony systems, monitoring tools, and security products.
• CISSP or relevant certification preferred.
• Strong English and Chinese communication (Putonghua).

Responsibilities

• Develop and enhance IT Security Policy with implementation.
• Lead cyber security program governance integrating policy, process, people and technology.
• Develop cyber risk control framework to identify, monitor and mitigate cyber risk.
• Manage cyber defensive systems to defend the Bank’s IT infrastructure.
• Investigate and respond to information security incidents.
• Review external regulatory guidelines related to cyber security and data security.
• Conduct IT security control assessments embedded in day-to-day operations and projects.
• Lead information security awareness training for Bank staff.
• Oversee network team to ensure secure, reliable network design and architecture.

Skills

Cyber risk management

Leadership

Regulatory awareness

English & Chinese communication

Education

Bachelor's degree in Computer Science or Information Technology

Tools

LAN/WAN

Telephony Systems

Monitoring Tools

Security Products (Cisco, Palo Alto, Checkpoint, Fortinet)

F5 Load Balancer

Job description

Develop and enhance the IT Security Policy and relevant standard with implementation.

Provide leadership in directing and governing the cyber security program integrating with technology, policy, process, people to mitigate the cyber security risk and safeguard against cyber attack for the Bank.

Develop the cyber security risk control framework to identify, control, monitor and mitigate the cyber risk.

Lead to manage cyber defensive systems to defend against cyber attack in order to protect the Bank's IT infrastructure.

Manage, investigate, and respond information security and cyber security incidents.

Review, comment and respond external regulatory guidelines related to cyber security, technology risk and data security.

Perform gap analysis for regulatory requirement change related to technology and cyber risk, and lead to close the identified gap timely.

Conduct IT security control assessment and other related IS-related compliance processes that appropriate controls are embedded in the day-to-day operation and IT related project, and remedies of non-compliance is addressed and documented.

Perform pre-audit preparation for target application system, which is covered in audit scope to determine appropriate controls are in place and in adherence to IS policy and standards.

Lead to develop information security awareness training to promote IS awareness for the Bank’s staff.

Manage network team to ensure network is sufficient to support technology domains with reliable and security manner and review network design and architecture.

Requirements:

Bachelor’s degree in Computer Science, Information Technology, or equivalent.

13 years or above relevant experience in IT security management, cyber risk control and with at least 8 years of experience in managerial role.

Familiar with the following platforms / systems: LAN & WAN, Telephony Systems, Monitoring Tools and Security Products (e.g. Cisco routers, Avaya/Cisco PABX, WFO, Palo Alto, Checkpoint & Fortinet Firewall and F5 Load Balancer).

Proven track record of managing cyber security and network team and influencing C-suite stakeholders.

Good command of written and spoken English and Chinese as well as fluent in Putonghua.

Holder of CISSP or relevant certification is preferable.

Other Information:

5-day work

• Annual leave, Paternity leave, Birthday Leave, Volunteer leave etc.
• Medical Plan and Dental Plan
• Family medical plan
• Insurance plan
• Discretionary Bonus

We offer competitive remuneration package and promising career opportunities to the successful candidates.

Chong Hing Bank Limited was established in Hong Kong in 1948. The Bank and its subsidiaries, including Chong Hing Securities and Chong Hing Insurance, provide comprehensive commercial banking and financial services to individuals and businesses. Our services include HKD and foreign currency deposits, credit facilities, foreign exchange, wealth management, investments, securities trading, insurance, and mandatory provident funds. With over 30 branches in Hong Kong, one in Macau, and 17 in Mainland China, Chong Hing Bank continues to expand its operations. Join our dynamic team and build a successful career with us.