MUFG | Cyber Security Threat and Vulnerability Specialist

6 days ago


hong kong, Hong Kong SAR China MUFG Full time

Cyber Security Threat and Vulnerability Specialist

Apply locations Hong Kong time type Full time posted on Posted 30+ Days Ago job requisition id 10068021-WD

Do you want your voice heard and your actions to count?

Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.

With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.

Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.

Key Responsibilities:

Ensure MUFG Securities Asia’s information risk controls align with ISO27002 Information Security Standards, covering but not limited to:

Threat and Vulnerability Management
  • Oversee the regional threat and vulnerability function
  • Coordination of vulnerability remediation and response with Technology Teams
  • Perform periodic and on-demand vulnerability and baseline configuration scanning of organization systems and monitor the security patch and compliance status
  • Perform periodic vulnerability scanning and monitor the security patch and compliance status
  • Coordination of critical vulnerability response and security incident resolution
  • Maintain up-to-date documentation relating to threat and vulnerability management, including process, procedures, and standards
  • Maintain baseline exceptions within central registrar
  • Improve and automate existing vulnerability management process
  • Reports on identified vulnerabilities and their associated risks
Cyber Security Operations
  • Monitor and respond to cyber-security events in SIEM handled in accordance with the established protocol of the International Cyber Security Team
  • Escalate security incidents and participate in investigation and risk containment/mitigation where necessary. Assist the incident response process as requested by GSOC Team
  • Manage security tools (vulnerability scanner, web security, malware protection, etc.)
  • Conduct User Awareness Training to improve MUS employee awareness of Cyber Threats
IT Risk & Control
  • Assist in ensuring MUFG Securities Asia operates under comprehensive and relevant policies and standards with appropriate staff awareness, compliance monitoring and reporting
  • Assist in managing the regional information security risk profile and associated operational risk reporting of information security and technology incidents
  • Assist in preparing monthly regional information security management reports and metrics for risk committees
  • Support incident reporting
Audit & Regulatory Liaison
  • Coordinate internal and external audit activities for information security across MUFG Securities Asia and ensure consistent and timely answers to information requests
  • Assist in ensuring any issues and remedial actions resulting from information security incidents and audits are agreed with appropriate timescales for resolution
Business Continuity, Outsourcing & Vendor Management
  • Coordinate the Business Continuity Management activities such as BIA and BCP reviews. Assist the BCM function to coordinate with various IT teams on drill tests
Skills & Requirements:
  • University degree majoring in information security, information systems, computer science or engineering
  • 5 years or more experience in Cyber Security especially Threat and Vulnerability Management, from investment bank or financial service institutes
  • Practical experience and working knowledge in implementation and operation of security scanning solutions using Qualys, infrastructure penetration testing, and application security testing
  • Hands-on security operations, threat intelligence, incident response and other related experience would be beneficial
  • Professional qualifications: CISSP, CEH, CISP, GWAPT, OSCP or other security related qualifications would be an advantage
  • Familiar with security and control for technologies / enterprise applications: Windows, Firewall, Network appliances, Virtualization platforms and/or evaluating and implementing cyber security management, IT service management and IT governance framework using NIST 2.0, ISO27001, ITIL and COBIT respectively
  • Excellent communication skills in both oral and written English
  • Independent, flexible, self-starter possessing intellectual curiosity
  • Effective project management, prioritization, interpersonal and communication skills are essential

MUFG Bank Ltd & MUFG Securities Asia Limited (collectively referred to as “MUFG”) is an equal opportunity employer. We view our employees as our key assets as they are fundamental to our long-term growth and success. MUFG is committed to hiring based on merit and organizational fit, regardless of race, religion or gender.

About Us

At MUFG, our colleagues are our greatest assets. Our Culture Principles provide a roadmap for how each of our colleagues must think and act to become more client-obsessed, inclusive and innovative. They reflect who we are, who we want to be and what we expect from one another. We are excited to see you take the next step in exploring a career with us and encourage you to spend more time reviewing them

#J-18808-Ljbffr

  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    We are seeking a highly skilled Cyber Security Specialist - Threat Management to join our team at Bank Of China (Hong Kong) Limited.Company OverviewBank Of China (Hong Kong) Limited is a leading financial institution in Hong Kong, providing a wide range of banking services to individuals and corporations.Job DescriptionThe Cyber Security Specialist - Threat...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    BANK OF CHINA (HONG KONG) LIMITED is seeking a highly skilled Cyber Security Specialist to join our team in Technology Risk Management.Job DescriptionWe are looking for an experienced Cyber Security Specialist to provide expert-level incident response, security operations, and threat intelligence services. The successful candidate will have a strong...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank Of China (Hong Kong) Limited Full time

    About the RoleWe are seeking a highly skilled Chief Information Security Officer to lead our Cyber Threat Protection team at Bank Of China (Hong Kong) Limited.Job ResponsibilitiesCyber Security Incident Response and Management: Develop and implement effective incident response plans, procedures, and playbooks to ensure timely and efficient responses to...


  • hong kong, Hong Kong SAR China Classy Wheeler Limited Full time

    Renowned retail corporation in Hong Kong and regional Job Description The Cyber Security Operations Manager, reporting to Senior Manager – Cyber Security Operations, is a cyber security specialist with corporate responsibility to direct and manage the execution of the security operations process. Work with GIT and BU IT Management on operational decisions...


  • Hong Kong, Central and Western District, Hong Kong SAR China Classy Wheeler Limited Full time

    Classy Wheeler Limited is seeking a highly skilled Cyber Security Analyst to join our team in Central, Hong Kong.About the RoleThis is an exciting opportunity for a security professional with strong hands-on experience in cyber security solution administration. The successful candidate will assist in implementing and administrating cyber security solutions,...


  • Hong Kong, Central and Western District, Hong Kong SAR China Bank of China Full time

    Job Title: Cyber Security Risk ManagerAbout the Role:We are seeking a highly skilled Cyber Security Risk Manager to join our team at Bank of China. As a key member of our Information Technology Department, you will be responsible for managing and mitigating technology risks to ensure the security and integrity of our systems and data.Key...


  • Hong Kong, Central and Western District, Hong Kong SAR China NLS Full time

    At NLS, we're seeking a highly skilled Cyber Security Expert to lead our threat mitigation efforts. This role offers an estimated salary of $150,000 - $180,000 per annum, commensurate with experience.


  • Hong Kong, Central and Western District, Hong Kong SAR China Classy Wheeler Limited Full time

    Classy Wheeler Limited, a renowned retail corporation in Hong Kong and Asia, is seeking an experienced Cyber Security Operations Manager to join its team.About the RoleThe Cyber Security Operations Director will be responsible for directing and managing the execution of security operations processes across Asia.This individual will work closely with Global...


  • Hong Kong, Central and Western District, Hong Kong SAR China Classy Wheeler Limited Full time

    About the RoleClassy Wheeler Limited seeks an IT Security Specialist to join our team. The ideal candidate will have experience in threat intelligence, risk management, and IT security.Key Responsibilities:Perform vulnerability scanning and automated code testing operations to identify potential security threats.Conduct threat assessment and patch management...


  • Hong Kong, Central and Western District, Hong Kong SAR China Classy Wheeler Limited Full time

    Classy Wheeler Limited: Cyber Security Operations ManagerWe are seeking a highly skilled and experienced Cyber Security Operations Manager to join our team at Classy Wheeler Limited in Hong Kong. This is an excellent opportunity for someone who wants to take on a challenging role and make a significant impact in the field of cybersecurity.About Us:Classy...


  • Hong Kong, Central and Western District, Hong Kong SAR China HKMC ANNUITY LIMITED Full time

    Job OverviewWe are seeking a seasoned Cyber Security Manager to lead our team in providing expert advice on IT solutions and systems from a risk perspective. The successful candidate will be responsible for implementing new regulations related to Cyber Security and IT control, conducting security and cloud risk assessments, and maintaining the Security Risk...


  • Hong Kong, Central and Western District, Hong Kong SAR China Meliora Full time

    Job OverviewWe are seeking a skilled Cybersecurity Vulnerability Management Specialist to join our dynamic team at Meliora. As a key member of our cybersecurity team, you will play a vital role in identifying and mitigating vulnerabilities to ensure the security of our firm.About the RoleThe ideal candidate will have a passion for cybersecurity and a keen...


  • Hong Kong, Central and Western District, Hong Kong SAR China Classy Wheeler Limited Full time

    Job Title: Cybersecurity Threat Intelligence SpecialistJob Summary:We are seeking a highly skilled Cybersecurity Threat Intelligence Specialist to join our team at Classy Wheeler Limited. This role will be responsible for performing vulnerability scanning and automated code testing operations, threat assessment and patch management advisory operations,...

  • Manager, IT Security

    2 months ago


    Hong Kong, Hong Kong SAR China Meliora Full time

    Our client is a Foreign Securities Firm. We are seeking a skilled Vulnerability Management Specialist to join our dynamic team. If you have a passion for cybersecurity and a keen eye for identifying and mitigating vulnerabilities, we want to hear from you! Key Responsibilities: Conduct regular threat and vulnerability assessments firm  Analyze and...


  • Hong Kong, Central and Western District, Hong Kong SAR China NLS Full time

    NLS is actively seeking a highly skilled Cyber Security Specialist to join their team. In this role, you will play a crucial part in securing our crypto trading services.You will collaborate closely with product and engineering teams to deliver secure software solutions across a modern tech stack.Key Responsibilities:Conduct web application, source code, and...


  • Hong Kong, Central and Western District, Hong Kong SAR China Meliora Full time

    **Job Summary**We are seeking a highly skilled Chief Information Security Officer to join our team at Meliora. As a key member of our security team, you will be responsible for conducting regular threat and vulnerability assessments, analyzing and prioritizing vulnerabilities based on risk and impact, and providing actionable remediation recommendations.The...

  • Security Specialist

    3 months ago


    Hong Kong, Hong Kong SAR China Thakral One Pte Ltd Full time

    Role Security Specialist - Vulnerability Management Primary Responsibilities Vulnerability Management Program Oversight Oversee and support the continuous improvement of the vulnerability management program initiatives, process and technology integration, and technical assessment. Enhance technology and/or process to validate inventory of critical...


  • Hong Kong, Central and Western District, Hong Kong SAR China Classy Wheeler Limited Full time

    Job DescriptionWe are seeking a highly skilled IT Security Analyst to join our team at Classy Wheeler Limited. As an IT Security Analyst, you will play a crucial role in ensuring the security and integrity of our computing environment.The successful candidate will have strong hands-on experience in cyber security solution administration, with a solid...


  • Hong Kong, Central and Western District, Hong Kong SAR China BTI Executive Search Pte Ltd Full time

    Job DescriptionAs a key member of our team at BTI Executive Search Pte Ltd, you will be responsible for defining and implementing cyber security strategies that align with regulatory expectations and industry best practices.Responsibilities:Develop and maintain minimum standards, metrics, and thresholds for the organizationAlign cyber security strategies...


  • hong kong, Hong Kong SAR China Bank of China Full time

    Senior / Technology Risk Manager (Cyber Security Control Division) Job No.: 494307Employment Type: Full timeDepartments: Information Technology DepartmentJob Functions: Information Technology, Risk Management Roles and Responsibilities & Specific Requirements (Application Security): Assist in reviewing IT initiatives and provide advisory from technology...