Section Head, IT Security & Network

Chong Hing Bank Limited; Hong Kong; On-site; HKD 800,000 - 1,100,000; Full time

Job summary

Chong Hing Bank Limited seeks a seasoned IT Security Manager to develop and enhance the Bank's IT security policy and standards, ensuring governance across technology, policy, process and people to mitigate cyber risk and defend the IT infrastructure.

You will lead security controls, incident response, regulatory alignment, and awareness training while coordinating with network teams to ensure secure, reliable operations across Hong Kong.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• 13 years or above relevant experience in IT security management, cyber risk control and with at least 8 years of managerial role.
• Familiar with LAN & WAN, Telephony Systems, Monitoring Tools and Security Products.
• Proven track record of managing cyber security and network team and influencing C-suite stakeholders.
• Good command of written and spoken English and Chinese as well as Putonghua.
• Holder of CISSP or relevant certification is preferable.

Responsibilities

• Develop and enhance the IT Security Policy and relevant standard with implementation.
• Provide leadership in directing and governing the cyber security program integrating with technology, policy, process, people to mitigate the cyber security risk.
• Develop the cyber security risk control framework to identify, control, monitor and mitigate the cyber risk.
• Lead to manage cyber defensive systems to defend against cyber attack in order to protect the Bank's IT infrastructure.
• Manage, investigate, and respond information security and cyber security incidents.
• Review, comment and respond to external regulatory guidelines related to cyber security, technology risk and data security.
• Perform gap analysis for regulatory requirement change related to technology and cyber risk, and lead to close the identified gap timely.
• Conduct IT security control assessment and other related IS-related compliance processes and remedies of non-compliance.
• Perform pre-audit preparation for target application system to determine appropriate controls are in place.
• Lead to develop information security awareness training to promote IS awareness for the Bank’s staff.
• Manage network team to ensure secure and reliable network supporting technology domains.

Skills

Cyber security management

Regulatory risk control

Leadership to C-suite

Network security

English & Chinese proficiency

Security program governance

Education

Bachelor’s degree in Computer Science or IT

Tools

Cisco routers

Avaya/Cisco PABX

Palo Alto

Checkpoint Firewall

Fortinet Firewall

F5 Load Balancer

Job description

Chong Hing Bank Limited was founded in Hong Kong in 1948. The Bank and its subsidiaries (including Chong Hing Securities Limited and Chong Hing Insurance Company Limited) offer comprehensive commercial banking and financial services to individual and corporate customers. These services include HKD and foreign currency deposits, credit, foreign exchange, wealth management, investment, securities, insurance and mandatory provident fund. The Bank currently operates a network of more than 30 branches in Hong Kong as well as 1 branch in Macau, 17 branches and sub-branches in Mainland China. In recent years, the Bank has been actively expanding its business. To cope with the Bank's rapid growth, we are now inviting high calibre candidates to join us and develop successful careers with us.

Responsibilities

• Develop and enhance the IT Security Policy and relevant standard with implementation.
• Provide leadership in directing and governing the cyber security program integrating with technology, policy, process, people to mitigate the cyber security risk and safeguard against cyber attack for the Bank.
• Develop the cyber security risk control framework to identify, control, monitor and mitigate the cyber risk.
• Lead to manage cyber defensive systems to defend against cyber attack in order to protect the Bank's IT infrastructure.
• Manage, investigate, and respond information security and cyber security incidents.
• Review, comment and respond external regulatory guidelines related to cyber security, technology risk and data security.
• Perform gap analysis for regulatory requirement change related to technology and cyber risk, and lead to close the identified gap timely.
• Conduct IT security control assessment and other related IS-related compliance processes that appropriate controls are embedded in the day-to-day operation and IT related project, and remedies of non-compliance is addressed and documented.
• Perform pre-audit preparation for target application system, which is covered in audit scope to determine appropriate controls are in place and in adherence to IS policy and standards.
• Lead to develop information security awareness training to promote IS awareness for the Bank’s staff.
• Manage network team to ensure network is sufficient to support technology domains with reliable and security manner and review network design and architecture.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• 13 years or above relevant experience in IT security management, cyber risk control and with at least 8 years of experience in managerial role.
• Familiar with the following platforms / systems: LAN & WAN, Telephony Systems, Monitoring Tools and Security Products (e.g. Cisco routers, Avaya/Cisco PABX, WFO, Palo Alto, Checkpoint & Fortinet Firewall and F5 Load Balancer).
• Proven track record of managing cyber security and network team and influencing C-suite stakeholders.
• Good command of written and spoken English and Chinese as well as fluent in Putonghua.
• Holder of CISSP or relevant certification is preferable.

We offer competitive remuneration package and promising career opportunities to the successful candidates.

The Mandatory Reference Checking (MRC) Scheme is a regulatory framework established by the Hong Kong Monetary Authority, which requires banks to check the conduct history of prospective employees for positions defined under the scheme. Therefore, MRC will be a part of our selection process if you apply for the in-scope positions. For details, please refer to the “Frequently Asked Questions for In-Scope Individuals” (https://www.hkab.org.hk/en/page/5/mandatory-reference-checking-scheme-phase-2) published by HKAB.