Information Security Engineer

4 days ago


Hong Kong, Hong Kong SAR China Hong Kong Exchanges and Clearing Limited Full time
Company Introduction:

We're home to Asia's most dynamic and vibrant capital markets.
Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day.

HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."

Job Summary:
The Information Security Engineer is part of HKEX Information Security function, playing a key role in enhancing the organization security posture. Incumbent is responsible for the design, build, operate and evolve the enterprise IT security solutions to address the organization's security requirements and engaging with key stakeholders to provide critical security services.

Job Duties:

Responsibilities
  • Engineer, implement and monitor security measures for the protection of computer systems, networks and information.
  • Identify and define system security requirements.
  • Design computersecurity architecture and develop detailedcyber securitydesigns.
  • Configure and troubleshoot security systems and infrastructure devices.
  • Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
  • Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services.
  • Work with handling security tool standard changes, such as Regular email template, access profile and data source update on Identify Governance & Administration (IGA) tool.
  • Delivery security service on-boarding such as connecting systems to Privileged Access Management (PAM) and IGA platforms, maintaining System Account Listing (SAL) for automated reconciliation and annual account recertification campaign.
  • Work with product vendors and suppliers to maintain and enhance existing security tooling and products.
  • Ensure that the organization security tools can detect and help with the response to cyber security incidents.
  • Document and validate disaster recovery testing for CyberSecurity tools.
  • Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancements.
  • Support in managing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials.
Requirements:
  • Proven work experience as a System Security Engineer or Information Security Engineer.
  • Experience in building, maintaining and operating security systems and platforms.
  • Hands on experience in PAM, IGA, Identity & Access Management (IAM) security systems.
  • Experience with network security and networking technologies and with system, security, and network monitoring tools.
  • Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust, etc).
  • Problem solving skills and ability to work under pressure.
  • Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of technical/non-technical audiences.
  • Strong written communication skills and verbal presentations to senior management.
  • Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience.
  • Good presentation, project planning and documentation skills.
  • Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.
  • Familiarity with application, database and operating system security.
  • Familiarity with cloud security technologies (AWS or Huawei Cloud Stack (HCS) is preferred).
  • Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3FEND, OWASP, NIST Cybersecurity Framework.
  • Familiarity in scripting (Python) or automation (Ansible) is an advantage.
  • Familiarity with Identity and Lifecycle management is an advantage.
  • Previous experience in regulated environments is an added advantage.
HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location:
HKEX - TKO

Shift:
Standard - 40 Hours (Hong Kong SAR)

Scheduled Weekly Hours:
40

Worker Type:
Permanent

  • Hong Kong, Hong Kong SAR China Hong Kong Exchanges and Clearing Limited Full time

    Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development...


  • hong kong, Hong Kong SAR China OKX Full time

    Hong Kong, Hong Kong SAR Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Job DescriptionCompany Overview: Bank of China (Hong Kong) Limited is a leading financial institution in the region.Job Summary: We are seeking an experienced Information Security Professional to join our team. The successful candidate will be responsible for managing and mitigating information security risks across the organization.Key...


  • hong kong, Hong Kong SAR China W-Consulting Company Ltd. Full time

    We are currently looking for a seasoned Information Security Engineer to join our client to be based in either Hong Kong or Singapore. They are one of the emerging data center platform companies which is growing rapidly across Asia. Responsibilities: Design, engineer, implement and monitor security measures for the protection of cloud information, and...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    At Bank Of China (Hong Kong) Limited, we are committed to excellence in information security and risk management. As a Chief Information Security Officer, you will play a vital role in protecting our organization's assets and maintaining the trust of our customers.The ideal candidate will have a strong background in IT security, technology risk, and risk...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    **Job Summary**At Bank Of China (Hong Kong) Limited, we are committed to maintaining a secure and compliant technology environment. As our Chief Information Security Strategist, you will play a critical role in driving our technology risk management initiatives and ensuring that our overseas branches adhere to the highest standards of information...


  • hong kong, Hong Kong SAR China Alumni Services Full time

    Information Technology Security Specialist 3 days ago Be among the first 25 applicants Alumni Services is a global digital transformation management consultancy with offices in Singapore, Hong Kong, Australia, UAE and the UK providing high-end expertise to industry leading clients to drive real business improvement through disruptive technologies. We offer...


  • hong kong, Hong Kong SAR China PCCW Full time

    Security Manager – Information Security and Cybersecurity Risk Your role Conduct risk and control assessment to identify, assess, monitor and mitigate risks within the overall IT system, application and network operation; Assist IT teams to ensure IT operation functions are defined, assessed and managed via appropriate policies, procedures, and control...


  • Hong Kong, Central and Western District, Hong Kong SAR China KOS International Limited Full time

    About the RoleThe Chief Information Security Officer will assist the department head in implementing robust and best practices of security governance, risk, and compliance procedures within the Technology department.Regular reassessment of risk registers to ensure alignment with overall strategic objectives;Collaboration with different business stakeholders...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Bank Of China (Hong Kong) Limited is seeking a Chief Information Security Officer - Application Security Specialist to join our team.Job DescriptionThe successful candidate will be responsible for:Reviewing IT initiatives from a technology risk perspective and providing advisory services.Establishing and reviewing policies, guidelines, and procedures in the...


  • Hong Kong, Hong Kong SAR China eFinancialCareers Full time

    We are looking for a highly motivated and experienced Network Security Engineer for our Global investment banking client. This critical role involves safeguarding the network infrastructure against emerging threats while ensuring compliance with industry regulations. The successful candidate will work within the Global Network Security team and leverage...


  • Hong Kong, Hong Kong SAR China NLS Full time

      The role: Team Leadership: Lead and direct a team covering the firm's cybersecurity operations. Ensuring the development of information security architectures, strategies, roadmaps, standards and procedures (cloud and on-prem). Collaboration: Work closely with various IT departments to validate information security and robustness for IT infrastructure,...


  • Hong Kong, Hong Kong SAR China BAH Partners Full time

    You will be responsible for existing production network security environments, including firewalls, SASE, CASB, Proxy, and more. You will oversee network and network security changes in hybrid, multi-cloud, and on-prem environments, ensuring the highest level of security for organization. Responsibilities • Manage and operate existing production network...


  • Hong Kong, Hong Kong SAR China Citi Full time

    The Info Security Ops Group Mgr is a senior management level position responsible for accomplishing results through the management of a team or department in an effort to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall objective of this role is to ensure the execution of Information Security directives and activities...


  • Hong Kong, Central and Western District, Hong Kong SAR China West Kowloon Cultural District Authority Full time

    Key ResponsibilitiesAssist in assessing and mitigating cybersecurity risks through vulnerability assessments, penetration testing, and security audits.Proactively lead and coordinate security projects and initiatives, despite limited supervision from the manager.Monitor and respond to security incidents with vendors and service providers, assisting in...


  • Hong Kong, Hong Kong SAR China Crypto.com Full time

    At Crypto.com , our dedication to user security is led by our highly experienced Security Team. Comprising an international roster of seasoned cybersecurity experts, our team leads the company's Security, Privacy, and Security Compliance endeavors. The team includes holders of international patents for technologies integrated in our security architecture....


  • Hong Kong, Hong Kong SAR China Aptitude Asia Full time

    Responsibilities To perform risk assessments, maturity analysis and security control test, in order to monitor information security compliance Provide security compliance assessment report and recommendations to management Oversee the implementation and compliance with Group-wide standards and regulatory requirements Streamline security-related processes...


  • Hong Kong, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    Roles and Responsibilities & Specific Requirements (Application Security): Assist in reviewing IT initiatives and provide advisory from technology risk perspectives Assist to establish and review policies, guidelines, procedures in application security area Provide advisory and practical guidance to support technology risk and information security...


  • Hong Kong, Central and Western District, Hong Kong SAR China W-Consulting Company Ltd. Full time

    We are seeking a seasoned Cloud Security Specialist to join W-Consulting Company Ltd. in Hong Kong or Singapore.About the Role:This is an exceptional opportunity for a skilled professional to protect our cloud infrastructure and maintain high standards of security.Design, engineer, implement, and monitor security measures for the protection of cloud...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bloombase Full time

    Job OverviewBloombase is revolutionizing data security in data centers with a transformative approach, seeking a senior engineer to join our team of experts who share our passion for innovation and excellence.This opportunity allows you to work on a wide range of technologies, including operating systems, cryptography, storage networking technologies,...