Some careers have more impact than others.
If you’re looking for a career where you can make a real impression, join Hang Seng and discover how valued you’ll be. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, Hang Seng offers opportunities, support and rewards that will take you further.
Chief Information Office
In Hang Sang Chief Information Office, we continually improve our capabilities through innovative technologies, delivering a comprehensive range of products and services in meeting changing customer needs. We enhance customer experience, convenience and choices across our distribution channels, providing secure and engaged offering at individual's preference and lifestyle expectation. We advocate creativity and collaboration to unlock the potential of our people, creating an open and progressive workplace. We develop deep expertise in financial technologies, consulting and partnering with our business in delivering customer centric propositions in an agile manner.
We are currently seeking a high caliber professional to join our team as Cyber Security Manager, reporting to Senior Cyber Security Manager.
Principal responsibilities
- Ensure all IT practices align with local cybersecurity regulations and internal cybersecurity standards for both banking and insurance sectors (e.g., HKMA C-RAF, HK IA GL20, etc.), and maintain proper and timely communication with various stakeholders.
- Streamline the assessment process, monitor outstanding issues, and lead or facilitate remediation efforts.
- Provide expertise, consultancy, and support as the Subject Matter Expert in Cybersecurity to various business units/functions to identify risks and determine the necessary IT security controls.
- Perform thorough security assessments and reviews focused on cloud security, third-party security, and application security, and provide actionable recommendations for security controls to address identified cybersecurity risks.
- Support projects involving emerging technologies, including Artificial Intelligence (AI) and Distributed Ledger Technology (DLT), by assessing associated cybersecurity risks and recommending appropriate security controls.
- Conduct IT and application risk assessments and provide design consultancy for software delivery.
- Monitor security incidents and coordinate incident response activities, including investigation, containment, eradication, and lessons learned.
- Stay abreast of the latest cybersecurity threat landscape and evaluate potential impacts on the bank.
- Deliver security awareness training to internal staff as well as third parties.
- Bachelor’s degree in computer science or a related discipline.
- Proven experience in IT security and risk management; candidates with less experience may be considered for an Associate role.
- Solid experience in cybersecurity controls, and IT risk management frameworks.
- Strong understandings of all IT and cybersecurity domains.
- Strong knowledge of banking and insurance regulations and guidelines related to cybersecurity and technology risk management, including Fintech.
- Strong self-motivation, with good leadership, communication, interpersonal and analytical skills.
- Great sense of ownership and a customer-centric mindset.
- Excellent command of both spoken and written English and Chinese; Mandarin is an advantage.
- Professional qualifications such as CISM, CISA, CISSP and CEH are preferred.
- Experienced in performing security risk assessment and audits based on industry standards.
Familiar with ISO 27001 Information Security Management Systems (ISMS).
https://www.linkedin.com/company/hang-seng-bank/
Hang Seng is committed to service excellence. Our people are our most important asset and play a vital role in our efforts to continually enhance our performance for customers and provide best-in-class products and services. We seek to attract high-calibre talent by offering a dynamic working environment, good career development opportunities and competitive compensation packages.
Issued by Hang Seng Bank Limited