Senior IT Information Security Manager

Nanyang Commercial Bank Ltd.; Hong Kong; On-site; HKD 900,000 - 1,400,000; Full time

Job summary

Nanyang Commercial Bank Ltd. is seeking an experienced Senior IT Information Security Manager in Hong Kong to lead architecture planning, AI-driven security operations, and governance.

The role requires strong incident response capability and a proven history of safeguarding banking information systems. You will oversee the design and enforcement of security controls, conduct periodic assessments, and drive improvements across risk and compliance with HKMA standards.

Qualifications

• Bachelor's degree or above in Information Technology, Computer Science, or related disciplines.
• Minimum of 5 years of experience in banking information security.
• Hands-on experience in Red/Blue team exercises and offensive security (e.g., SQL injection, XSS, privilege escalation, CC attacks).
• Foundational knowledge of AI/LLM and experience in security design/auditing.
• Full lifecycle management of information security products/services (procurement, implementation, O&M).
• 5+ years in security tool operation and rule formulation (e.g., log parsing, risk analysis, compliance verification).
• Strong strategic planning and cross-functional collaboration skills.
• HKMA-recognized information security certifications (e.g., CISSP, CISM, CISA) is a must.
• Fluent in English, Chinese and Putonghua.

Responsibilities

• Architecture Planning & Implementation: Design and optimize bank-wide information security architecture, defense-in-depth, and review security solutions for new systems and major changes.
• AI Security Operations Tool Design & Enablement: Research and implement AI/LLM in security operations; develop automated tools for log parsing, risk analysis, and compliance verification.
• Security Governance, Compliance & Audit: Maintain information security management system; conduct compliance checks and remediation plans for vulnerabilities and audit findings.
• Daily Security Operations & Incident Response: Monitor cybersecurity posture; lead incident response, cyber drills, and PIRs; improve monitoring and threat detection.

Skills

Red/Blue team

Offensive security

AI/LLM familiarity

Security design/auditing

Security product lifecycle

Security tool operation

Log parsing

Risk analysis

Compliance verification

Education

Bachelor's degree in IT/CS

Job description

Nanyang Commercial Bank Ltd. is seeking an experienced Senior IT Information Security Manager in Hong Kong to lead architecture planning, AI-driven security operations, and governance.

The role requires strong incident response capability and a proven history of safeguarding banking information systems. You will oversee the design and enforcement of security controls, conduct periodic assessments, and drive improvements across risk and compliance with HKMA standards.