Assistant Vice President, IT Security - IT Operations Department

Responsibilities:

• Deliver high quality of vulnerability scanning, various types of penetration tests for the bank systems covering infrastructure, web application, mobile application regularly.
• Perform system hardening for e-banking systems.
• Support IT security systems covering tenable security center. Database firewall and WAF.
• Collaborate, monitor the cyber threat landscape through open source channels, vendor feeds and analyze of cyber threat intelligence.
• Advise management on the latest trends in cyber intelligence and best practices, through close collaboration and engagement with security industry and government agency.
• Lead the development and implementation of mitigation proposal to prevent the potential threat.

Requirements:

• Degree holder in Information Systems, Computer Science or related disciplines
• Minimum 5 years' working experience in cyber security area, preferably in consulting firm, technology vendor or bank.
• Professional qualifications of CREST relevant certifications are highly preferable while CISA , CISSP or relevant certifications are also considered.
• Expert knowledge on penetration tools, e.g. Tenable Nessus, Nmap, Burp, IBM AppScan, Zap, Kali Linux, etc.
• Proficient to perform variety of penetration test.
• Hand-on experience on IT security system.
• Monitor and maintain up-to-date intelligence of threats of cyber attacks.
• Strong communication and good report writing skills in English.
• Self-motivated and able to work independently. 

We offer competitive remuneration package and promising career opportunities to the successful candidates. Interested parties, please send full resume with current & expected salary and the date of availability to The HR Division, G.P.O. Box 2535, HK , or by clicking Apply Now. Please quote reference on your application. Information provided will be treated in strict confidence and only be used for recruitment purposes. Personal data of unsuccessful applications will be destroyed 24 months after the completion of the recruitment and selection exercise.