WeLab Bank - Manager, Cyber Security

WeLab Bank; Hong Kong; On-site; HKD 900,000 - 1,200,000; Full time

Benefits offered by this job

Learning stipend

Wellness & flexible time off

Open office with free food

Social area and events

Team-oriented culture

Job summary

WeLab Bank is seeking an experienced IT security professional to design, implement, and maintain robust security controls. You will partner with infrastructure and development teams to manage vulnerabilities, design AI-powered monitoring, and ensure adherence to HKMA requirements.

The role demands strong English and Cantonese communication, 6+ years in IT security, and relevant certifications (CISSP/CISA/CISM/CRISC).

Qualifications

• 6+ years in IT security with strong technical background.
• Enterprise security, data protection and vulnerability management expertise.
• Knowledge of networks, firewalls, servers and cloud security.
• Familiar with HKMA rules including C-RAF and iCAST.
• Proficient English and Cantonese communication.
• Security certifications (CISSP/CISA/CISM/CRISC) required.

Responsibilities

• Design, implement and maintain security infrastructure per policies and regulations.
• Formulate security policy, guidelines and procedures across the bank.
• Collaborate with infra and dev teams on vulnerability management and patching.
• Design and deploy AI-enabled security monitoring and SIEM integration.
• Evaluate new technologies to mitigate evolving risks.
• Coordinate with internal and external auditors for cyber security and BCP reviews.
• Ensure cyber security measures meet HKMA requirements.

Skills

IT security

Regulatory knowledge

Vulnerability mgmt

Network security

Cloud security

EDR / DLP

HKMA awareness

Communication (EN/Cantonese)

Education

CISSP / CISA / CISM / CRISC or equivalent

Job description

WeLab, a leading pan-Asian fintech platform, operates two digital banks (WeLab Bank and Bank Saqu) as well as multiple online financial services in Hong Kong, Mainland China, and Indonesia, with over 70 million individual users and over 700 enterprise customers. WeLab uses game-changing technology to help users access credit, save money, and enjoy their financial journey.

At WeLab, we always put our people first. Embarking on a career with WeLab means being part of the driving force to make financial services accessible for everyone. In our flat and agile organization, you will get all the opportunities to make real impacts and deliver change. Most importantly, while you achieve greatness, we will ensure you have an amazing experience at WeLab!

Our team is energetic and passionate who can deliver and execute, and we are looking for intellectually curious, open-minded, and smart-working individuals who are just as passionate as we are about making financial services enjoyable.

Join us to build a better financial future for everyone!

About You

• You're a go-getter with mad juggling skills (or multiple hats) who can thrive in a fast-paced, agile environment
• You enjoy doing purpose-led and meaningful work
• You have a strong thirst for knowledge and are driven to find solutions that don't exist yet
• You are comfortable with ambiguity and extremely resourceful (in your past life, you could've been a detective)
• You always find a way to get things done without sacrificing the quality of your work, integrity, and values
• No task is off limits for you
• You are humble and prioritize the success of the team over your own with an eagerness to help those around you
• You don't shy away from challenges and can bounce back from setbacks

What you’ll do and what success looks like in this role

• Responsible for design, implement and maintain the security infrastructure in according to the bank’s policies and regulatory requirements.
• Formulate security policy, guidelines, and procedures across the bank.
• Work closely with infrastructure and development teams in vulnerability and patch management.
• Design and implement AI-enabled security monitoring and SIEM integrations to improve security event correlation, anomaly detection and threat hunting.
• Evaluate and assess new / emerging technologies to cope with changing the risk of the bank's environment.
• Manage internal and external auditors in performing cyber security and BCP assessment.
• Review and ensure the Cyber Security measures is fulfilling the HKMA requirements.

What Is Required And What We’re Looking For

• At least 6 years experience in IT Security related aspects.
• Strong understanding of enterprise security, data protection and vulnerability management.
• Strong technical knowledge in network, firewall, internet and servers.
• Familiar with HKMA's regulatory requirements including C-RAF and iCAST.
• Knowledge of web access control, EDR, DLP, attack and defences.
• Experience with cloud security (AWS, Azure, GCP etc…) is preferable.
• Excellent Communication skills in English and Cantonese.
• Security Certificates in CISSP / CISA / CISM / CRISC or equivalent is a must.

Perks And Benefits To Enrich Your Experience At WeLab

• Learning and development stipend - we value lifelong learning and believe the best way to invest in our employees is to encourage them to continue to learn
• Wellness and happiness – Numerous activities to let you focus on your physical and mental wellbeing. We allow flexible time offs to take care of personal matters and to enjoy time with family and friends
• Comfortable and positive work environment – Open plan office for easy collaboration and social with your colleagues, or branch out into your own thinking pods when needed, with FREE food and drinks for when you want to recharge
• Work smart, play hard – Connect with your colleagues over food and drinks at the stocked pantry, in the spacious social area with board games and a ping pong table, or over activities like hiking, yoga, badminton, etc.
• A big and contagious smile on everyone’s face to make you happier

WeLab’s Awards & Recognitions

• Asia Banking Finance Retail Banking Awards: Virtual Bank of the Year - Hong Kong
• CNBC Disruptor 50: the only Hong Kong‑based company on the list
• Financial Times Asia‑Pacific High‑Growth Companies: #2 in ranking
• The Chinese University of Hong Kong “Corporate Innovation Index”: #1 in ranking

We offer a competitive salary package to the successful candidate.

All information provided by applicants will be used for recruitment purposes only. Information of unsuccessful applicants will be destroyed within 24 months of receipt.