Infrastructure Security Specialist

Infrastructure Security Specialist – Societe Generale Join to apply for the Infrastructure Security Specialist role at Societe Generale . 2 days ago Be among the first 25 applicants. Responsibilities Lead critical security projects and provide expertise to drive teams to adapt target security standards (i.e IAM/PAM, vulnerability management topics). Supervise and communicate on infrastructure security issues related to workplace, hosting and other infrastructure services to ensure internal security controls are appropriate and operating. Provide security expertise to assist GTE management and other teams to drive security mindsets, perform security/risk assessments. Incident management: Report and follow security incidents and their remedial actions. Innovate, propose and drive continuous improvement on our security measures for the region and to our clients/partners. Work with other security teams (ISR/SOC, other LODs) to improve our security protection and incident investigation and management process. Manage the security production related topics with all the support teams in the Operational Risks Domain. Change management: Conduct security assessment for infrastructure changes. Be the security interface with stakeholders at all levels, from technical engineers to senior management locally, regionally and globally. Cyber reporting: Produce various cyber security reporting (KPIs; KRIs) and coordinate with Infrastructure teams to contribute to external stakeholders reporting and requests. Coordinate within Infrastructure teams to drive and manage security operations and controls. Conduct security & risk awareness training to the Infrastructure teams. Required Knowledge & Qualifications Expert knowledge in IT operational risk management. Expert knowledge and experience in IT security. Professional certification recognized by regulatory bodies such as HKMA (e.g., CISM, CISA, or CISSP) – mandatory. Knowledge and experience in IT infrastructure (speak the language; expertise not required). Knowledge of technology regulatory requirements such as HKMA, SFC, MAS, GDPR, CBIRC, etc. – required. Project management experience is desired. Knowledge and experience in a banking environment will be beneficial but not essential. Tools Good skills in Microsoft Office, especially Excel and PowerPoint. Knowledge of programming or hands‑on scripting for automation. Knowledge of identity management solutions, SIEM, vulnerability management and other security products. Behavioral Skills Client‑Risk: Strive to satisfy clients while considering risks for the company. Team Spirit – Collective Mindset: Favor the team’s interests over personal results. Team Spirit – Synergies: Prioritize cooperation with colleagues inside and outside the team. Commitment – Sustainability: Strive to develop skills and knowledge. Responsibility – Risk Awareness: Constantly look out for risks. Responsibility – Performance: Strive for high performance. Hybrid Work Environment Societe Generale offers a hybrid work arrangement that provides flexibility to work remotely and on‑site, promoting interaction and collaboration while adhering to SG standard protocols. The arrangement varies by business area. Equal Opportunities Statement We are an equal opportunities employer and are proud to make diversity a strength for our company. Societe Generale is committed to recognizing and promoting all talents, regardless of beliefs, age, disability, parental status, ethnic origin, nationality, gender identity, sexual orientation, membership of a political, religious, trade union or minority organisation, or any other characteristic that could be subject to discrimination. #J-18808-Ljbffr