Associate Information Security Engineer

7 days ago

Hong Kong, Central and Western District, Hong Kong SAR China Hong Kong Exchanges and Clearing Limited Full time

Company Introduction:

We're home to Asia's most dynamic and vibrant capital markets.
Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day.

HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all."

Job Summary:
The Information Security Engineer is part of HKEX Information Security function, playing a key role in enhancing the organization security posture. Incumbent is responsible for the design, build, operate and evolve the enterprise IT security solutions to address the organization's security requirements and engaging with key stakeholders to provide critical security services.

Job Duties:

Responsibilities

  • Engineer, implement and monitor security measures for the protection of computer systems, networks and information.
  • Identify and define system security requirements.
  • Design computersecurity architecture and develop detailedcyber securitydesigns.
  • Configure and troubleshoot security systems and infrastructure devices.
  • Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
  • Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services.
  • Work with handling security tool standard changes, such as Regular email template, access profile and data source update on Identify Governance & Administration (IGA) tool.
  • Delivery security service on-boarding such as connecting systems to Privileged Access Management (PAM) and IGA platforms, maintaining System Account Listing (SAL) for automated reconciliation and annual account recertification campaign.
  • Work with product vendors and suppliers to maintain and enhance existing security tooling and products.
  • Ensure that the organization security tools can detect and help with the response to cyber security incidents.
  • Document and validate disaster recovery testing for CyberSecurity tools.
  • Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancements.
  • Support in managing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials.
Requirements:
  • Proven work experience as a System Security Engineer or Information Security Engineer.
  • Experience in building, maintaining and operating security systems and platforms.
  • Hands on experience in PAM, IGA, Identity & Access Management (IAM) security systems.
  • Experience with network security and networking technologies and with system, security, and network monitoring tools.
  • Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust, etc).
  • Problem solving skills and ability to work under pressure.
  • Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of technical/non-technical audiences.
  • Strong written communication skills and verbal presentations to senior management.
  • Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience.
  • Good presentation, project planning and documentation skills.
  • Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols.
  • Familiarity with application, database and operating system security.
  • Familiarity with cloud security technologies (AWS or Huawei Cloud Stack (HCS) is preferred).
  • Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3FEND, OWASP, NIST Cybersecurity Framework.
  • Familiarity in scripting (Python) or automation (Ansible) is an advantage.
  • Familiarity with Identity and Lifecycle management is an advantage.
  • Previous experience in regulated environments is an added advantage.
HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location:
HKEX - TKO

Shift:
Standard - 40 Hours (Hong Kong SAR)

Scheduled Weekly Hours:
40

Worker Type:
Permanent

  • Information Security Expert

    4 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Pentastic Security Limited Full time

    We are looking for a talented Security Consultant to join our team at Pentastic Security Limited. As a key member of our team, you will play a vital role in identifying and mitigating cybersecurity risks for our clients.Job DescriptionThe successful candidate will have a solid understanding of cybersecurity principles and practices, as well as excellent...

  • Information Security Specialist

    10 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China Pentastic Security Limited Full time

    Company OverviewPentastic Security Limited is a renowned cybersecurity company delivering innovative security solutions to clients worldwide. Our mission is to empower businesses with cutting-edge security expertise.Job ResponsibilitiesThe successful candidate will be responsible for identifying and mitigating potential security risks through vulnerability...

  • Information Security Specialist

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Pentastic Security Limited Full time

    Pentastic Security Limited is a leading provider of cybersecurity solutions, and we're looking for an ambitious Entry-Level Cybersecurity Professional to join our team. In this role, you'll work closely with our experts to provide high-quality security services to our clients.To be successful, you'll need a solid foundation in computer science, strong...

  • Information Security Team Manager

    2 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Rise Associates Asia Limited Full time

    About Us:Rise Associates Asia Limited is seeking an experienced Information Security Team Manager to join our team. This role involves managing a team of IT security engineers, developing and implementing IT security policies and procedures, and ensuring compliance with relevant laws and regulations.The ideal candidate will have strong technical knowledge of...

  • Information Security Specialist

    2 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Pentastic Security Limited Full time

    About the RoleWe are looking for a skilled and passionate Cybersecurity Consultant who will work closely with our clients to identify and mitigate potential security threats. This role requires a strong understanding of cybersecurity principles, practices, and technologies.

  • Information Security Engineer

    24 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China Autotoll Limited Full time

    To cope with our expansion and continuous growth in the transportation and logistics related service, we are inviting talents to join our professional team.About the Role:Assist in the implementation and maintenance of security solutions, including firewalls, IDS/IPS, WAF, EDR, and other security tools.Monitor security systems for unusual activity and...

  • Information Security Specialist

    14 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China CITIC Telecom International CPC Limited Full time

    Management Trainee (Information Security) ProgramThe Management Trainee (Information Security) program at CITIC Telecom International CPC Limited is a 1-year comprehensive training initiative that equips high-calibre IT graduates with extensive exposure to the ICT industry.Awarded to nurture talented individuals and provide them with all-rounded rotations...

  • Information Security Professional

    4 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Your Key RoleAs a (Senior) Cyber Security Consultant & Penetration Tester, you will be responsible for executing various engagements, conducting advanced hands-on penetration testing beyond automated tool validation. Your key responsibilities will include:Leading and executing network, web and mobile application, wireless, and social engineering penetration...

  • Security Engineer

    3 weeks ago

    Hong Kong, Central and Western District, Hong Kong SAR China Sanderson-iKas Full time

    We are seeking a Cloud Security Engineer to join and support the engineering of cloud security solutions for a global investment bank. The role requires a solid understanding of Information Security concepts and hands-on experience with various information security tools, including Cloud Security, Identity Access Management, incident management, and...

  • Information Security Consultant Role

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Cyber Security Career OpportunityJoin wizlynx group, a leading Swiss Cyber Security provider, as a Cyber Security Consultant & Penetration Tester. We offer a thrilling, challenging but fun environment where what you do is important and meaningful. At wizlynx, there is no limit but the sky. If you wish to learn and get involved in other areas of cyber...

  • Security Consultant

    2 weeks ago

    Hong Kong, Central and Western District, Hong Kong SAR China Pentastic Security Limited Full time

    Join Our Team at Pentastic Security LimitedAre you passionate about cybersecurity and eager to develop a career in this dynamic field? Pentastic Security is looking for dedicated individuals to join our expanding team as Security Consultant. If you're ready to embark on an exciting journey in Cybersecurity, we want to hear from youWhat We Offer:On-the-Job...

  • Network Engineer-Security

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Logicalis Asia Pacific Full time

    Logicalis HK Ltd , office located in Suites 1401-4, 14/F, 1063 King's Road, Quarry Bay, Hong Kong Responsibilities: Support customer with a wide range of Information and Communications Technology (ICT) data and security products Assist in leading project roll out and troubleshooting for all network connectivity Responsible for Project Implementation, Demo &...

  • Head of Information Security

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China KOS International Full time

    About the CompanyOur client are seeking a highly skilled and experienced Head of Information Security to lead their organization's efforts in safeguarding sensitive data, ensuring compliance with regulatory standards, and mitigating information asset risks. The ideal candidate will have a strong background in information security, risk management, and team...

  • Cyber Security Engineer

    21 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China Retail Technology Asia Full time

    Retail Technology Asia (RTA) is a cloud-based digital retail service company headquartered in Hong Kong. We have world-leading SaaS technology. We are looking for a professional Cyber Security Engineer to join our Cyber Security team. The Job Maintain product security specification and requirements Maintain security architecture blueprints Review static...

  • Information Security Manager

    10 hours ago

    Hong Kong, Central and Western District, Hong Kong SAR China BDx Data Centers Full time

    The Information Security Manager will be responsible for ensuring the confidentiality, integrity, and availability of BDx Data Centers' information assets. This includes developing, implementing, and maintaining effective security policies and procedures.The ideal candidate will have strong knowledge of cloud security and on-prem security, as well as...

  • Information Systems Security Specialist

    2 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Wizlynx Malaysia Sdn Bhd Full time

    Job Description:We are seeking a highly skilled Cyber Security Consultant to join our team at Wizlynx Malaysia Sdn Bhd. As a key member of our security team, you will be responsible for executing a variety of engagements, conducting advanced hands-on penetration testing beyond automated tool validation.This will involve targeting network devices, servers,...

  • Information Security Manager

    2 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Rise Associates Asia Limited Full time

    Serves as the 2nd-man of the team under the Head of IT Security, you will support the Head to co-manage a reasonably-sized IT security team, which consists of both 1st and 1.5 line of defense professionals. As the manager of the team, your key deliverables gravitate towards 1.5 line of defense nature, being responsible for analyzing, upkeeping, and enhancing...

  • Security Engineering Expert

    5 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China ioTech Solutions Full time

    We're looking for an experienced Security Engineering Expert to join ioTech Solutions as a key member of our cybersecurity team. As a Security Engineering Expert, you will be responsible for designing and implementing robust security frameworks to protect our clients' sensitive information.Key Responsibilities:Develop comprehensive security plans to mitigate...

  • Information Security Manager

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China Aptitude Asia Full time

    ResponsibilitiesTo perform risk assessments, maturity analysis and security control test, in order to monitor information security compliance Provide security compliance assessment report and recommendations to management Oversee the implementation and compliance with Group-wide standards and regulatory requirements Streamline security-related processes e.g....

  • Information Security Director

    7 days ago

    Hong Kong, Central and Western District, Hong Kong SAR China PrimePeak Group Full time

    Information Security DirectorWe are seeking an experienced Information Security Director to join our team at PrimePeak Group. As a key member of our IT department, you will be responsible for evaluating IT security controls, data protection measures, and cyber resilience frameworks.Key Responsibilities:Evaluate IT security controls, data protection measures,...