Senior Officer, Cybersecurity

Ua Finance; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Benefits offered by this job

Competitive salary

Double pay

Performance bonus

Medical benefits

Staff learning subsidies

Life & accident insurance

Leave benefits

Company activities

Growth opportunities

Job summary

Ua Finance seeks a senior cybersecurity professional in Hong Kong to lead security audits, risk assessments, and architecture improvements across our technology landscape. The role requires hands-on experience with vulnerability assessments, penetration testing, and AI security governance in regulated environments.

Ideal candidates hold CISSP/CISM/CEH/CRISC with OCSP and have 8+ years of relevant experience.

Qualifications

• Bachelor’s degree or above in Information Technology, Computer Science, Cyber Security, or related discipline.
• Professional certifications such as CISSP, CISM, CEH, or CRISC are highly preferred; OCSP is mandatory.
• Minimum 8 years of professional cybersecurity experience, preferably in banking/financial services or regulated environments.

Responsibilities

• Security Compliance Audits: Execute regular compliance audits including vulnerability scanning and configuration reviews.
• Third-Party Risk Management: Lead and assist with TPRM assessments and on-site security audits of business partners.
• Security Solutions Architecture: Research, evaluate, and recommend advanced security solutions (DLP, SIEM, EDR).
• Project Security Consultation: Provide cybersecurity expertise throughout the development lifecycle and corporate projects.
• Security Operations Support: Collaborate with the SOC to maintain overall security hygiene.

Skills

Analytical thinking

Problem solving

Communication

Executive reporting

Resilience

Education

Bachelor’s degree in IT/Cyber Security

Related discipline acceptable

Tools

DLP

SIEM

EDR

Job description

Security Compliance Audits: Execute regular compliance audits, including vulnerability scanning, configuration reviews, and stay abreast of global technology trends, and compliance frameworks (e.g., NIST, ISO 27001:2022, CIS, PCI-DSS).

Third-Party Risk Management: Lead and assist with third-party risk management (TPRM) assessments, including on-site security audits of business partners.

Security Solutions Architecture: Research, evaluate, and recommend advanced security solutions and infrastructure enhancements (e.g., DLP, SIEM, EDR).

Project Security Consultation: Provide cybersecurity subject-matter expertise throughout the lifecycle of application development and corporate projects.

Security Operations Support: Partner closely with the Security Operations Center (SOC) to maintain the overall security hygiene of the organization’s environment.

Job Requirements:

Education: Bachelor’s degree or above in Information Technology, Computer Science, Cyber Security, or a related discipline.

Professional Certifications: Professional certifications such as CISSP, CISM, CEH, or CRISC are highly preferred. OCSP is mandatory.

Experience: Minimum of 8 years of professional cybersecurity experience, preferably within banking, financial services, or regulated environments.

Technical Domain: Proven track record in vulnerability assessments, penetration testing, international security standards implementation, AI / ML application security, and AI governance.

Soft Skills: Strong analytical, problem-solving, and communication skills, with a proven ability to deliver high-impact technical reports and executive presentations.

Resilience: Demonstrated ability to work productively under pressure, manage competing priorities, multitasking and meet tight deadlines.

Note: Candidates with less experience may be considered for the role of Officer, Cyber Security.

We Offer:

Remuneration Package

Competitive Basic Salary

Double Pay

Performance Bonus

Family-Friendly Leave

Maternity Leave

Paternity Leave

Compassionate Leave

Life and Accident Insurance Scheme

Medical Benefits

Staff Learning Subsidies and Development

Learning Sponsorship

Personal development and growth opportunities

Company Activities and Gathering

Diversified Interest Classes

Company Outing

Sponsored Gathering

Marathon Running