Security Engineer (IT Audit/Compliance) (Fintech) - IC
Client Description
Fintech company that specializes in providing cost-effective Payment Solutions for three main sectors: E-Commerce, Education, and Travel
Job Description
- Develop and maintain network and security solutions based on technology risk management model and comply regulatory requirements on IT infrastructure
- Manage and implement patch management, version upgrade, change management and capacity management of production systems
- Maintain policies and procedures for the implementation and enforcement of company and security policy
- Assist in maintaining industry certifications (e.g. PCI-DSS, ISO27001, GDPR, HKMA C-RAF)
- Liaise with vendors and other IT personnel for problem resolution
- Perform analysis of network security needs and contribute to design, integration, and installation of hardware and software.
- Assist in maintaining and administering perimeter security systems such as firewalls and intrusion detection systems.
- Identify and define system security requirements
- Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks
- Establish and enforce the security standard in IT infrastructure
- Enhance and implement security and risk management
Job Requirements
- BS/MS degree in Computer Science, Engineering or a related subject
- Information security related certifications are desired (e.g. CISSP, CISA, CEH, OSCP)
- Hands-on experience in LAN/WAN infrastructure, firewall, VLAN, router, switch and VPN
- Hands-on experience in Windows, Linux, Cloud infrastructure
- Familiar with information security technologies, like Anti-Virus, ID/PS, Log analysis platform
- Self-motivated, willing to learn, able to work independently
- Strong verbal and written communication skills, Cantonese, English and Mandarin
- Industrial recognized IT certification will be an advantage
- Team player, open and willing to learnOccasional travel