Senior Technology Risk & Cyber Security Lead

Hong Kong Job Consulting; Hong Kong; On-site; HKD 700,000 - 1,000,000; Full time

Job summary

A senior technology risk role in Hong Kong focuses on leading the Cyber Security Control Division within a bank. You will review IT initiatives from a technology risk perspective, establish and update application security policies, and guide vulnerability testing and risk assessments.

Strong communication and Mandarin or Cantonese skills are valued. Responsibilities span incident response, threat intelligence, OSINT, forensics, and collaboration on Red & Purple Teaming with knowledge of

Qualifications

• Degree in Computer Science or Information Systems or related field.
• 2+ years in IT security, technology risk, risk management, compliance or IT audit in sizable financial institutions.
• HKMA enhanced competency framework qualifications (CISA/CISSP/CRISC) preferred.
• Familiar with HKMA TM-E-1, PCI-DSS, ISO 2700-series or similar risk frameworks.

Responsibilities

• Assist review of IT initiatives from technology risk perspectives.
• Establish and review application security policies, guidelines, and procedures.
• Provide advisory on vulnerability scanning, penetration tests, and risk assessments.
• Conduct regular assessment on application security.
• Support Cyber Security incident response operations and threat intelligence activities.
• Participate in Red & Purple Teaming exercises.
• Familiar with Firewall, IDS, IPS, SIEM, SOAR and network/cloud infrastructure.

Skills

Application Security

Cyber Security

Platform Security

Threat Intelligence

Incident Response

Red Teaming

Purple Teaming

OSINT

Forensics

Security Testing Tools

Education

Degree in Computer Science or Information Systems

HKMA qualification ⇒ CISA CISSP CRISC preferred

Tools

Fortify

AppScan

Nessus

Firewall

IDS/IPS/SIEM/SOAR

Job description

A senior technology risk role in Hong Kong focuses on leading the Cyber Security Control Division within a bank. You will review IT initiatives from a technology risk perspective, establish and update application security policies, and guide vulnerability testing and risk assessments.

Strong communication and Mandarin or Cantonese skills are valued. Responsibilities span incident response, threat intelligence, OSINT, forensics, and collaboration on Red & Purple Teaming with knowledge of