Key Responsibilities
* To support the team to conduct regular security assessment, e.g. regular security scanning, handling SPAM/Phishing incident, etc.
* To support and follow up the Threats & Vulnerability Management process.
* To support the new security related project team's administration and documents tasks, such as IAM, Cloud Adoption, STDB, etc.
* To support implementing the iCAST remediation, new CNCB & Regulatory Requirement
* To support the new security tasks for new projects initiatives, such as SIP & XDR antivirus management, BYOD security, etc.
* To support the enhancement on security tools, such as security scanning automations, PAMS script integrations, SIEM correlation rules, etc.
* As SME on Cybersecurity services to collaborate with application team for project scoping and delivery.
Job Specifications
Knowledge, Skill & Attributes
* 2-3 year hands-on experiences on IT security tools
* Basic knowledge of the CI/CD, DevSecOps or similar agile development
* Experiences on HK FSI, banking industry is preferred
* Basic communications with English and Mandarin
* Following security best practices in performing tasks
Academic and Professional Qualification
* Degree holder (or above) which is related to Information Technology
* Fulfill HKMA ECF is preferable
Training and Relevant Experiences
* 1-2 years experiences on HK FSI, banking industry is preferred
* Basic knowledge on software programming and networking
* Sound knowledge on Software Development Life Cycle
Experiences on Application/Development Security is an advantage, i.e.
* Developing and maintaining software application security policies and procedures
* Developing and maintaining documentation of application security controls
* Implementing software application security controls
* Designing technical solutions to address security weaknesses
* Analyzing system services, spotting issues in code, networks and applications
