HONG KONG MONETARY AUTHORITY Hiring! Full Time Associate, IT Security (IT Application Service and Security) (CMU OmniClear vacancy) in Hong Kong - Ricebowl

The Hong Kong Monetary Authority (HKMA) is charged with the responsibility for maintaining the stability and integrity of the monetary and financial systems of Hong Kong.

CMU OmniClear Limited (CMU OmniClear) is a wholly owned subsidiary of CMU OmniClear Holdings Limited, which is jointly owned by the Exchange Fund (as the majority shareholder) and Hong Kong Exchanges and Clearing Limited (as the minority shareholder). It carries out the operation and business development activities of the Central Moneymarkets Unit (CMU) on behalf of the HKMA. As part of the critical financial market infrastructure in Hong Kong, CMU is a central securities depository (CSD), providing secure and efficient clearing, settlement and custodian services for securities. CMU OmniClear’s vision is to continuously enhance CMU service coverage, expand connectivity with other markets and upgrade the CMU infrastructure to provide market participants with comprehensive and quality services.

We now invite eligible candidates to join our dynamic and inclusive company for the exciting opportunity below:

Associate, IT Security (IT Application Service and Security)

Key Responsibilities

• Assist in the implementation, operation and maintenance of IT security-related systems
• Safeguard information-system assets through the prevention, detection, investigation and resolution of security incidents
• Conduct security risk assessments across IT systems using standardised frameworks
• Perform vulnerability assessments and penetration testing; analyse findings and formulate practical recommendations for remediation
• Keep abreast of cybersecurity threats and developments in security technologies, practices and applicable regulatory requirements, including those issued by the Government and relevant regulators
• Develop and deliver cybersecurity awareness and training programmes for staff

Requirements

• University degree in computer science, information technology, cybersecurity or related fields
• At least 2 years of relevant experience in a well-established financial organisation or leading financial institution
• Possession of a certification in CISP / CISSP / CISA or equivalent is highly desirable
• Knowledge of cloud security implementation
• Experience in securing blockchain applications in cloud environments is highly desirable
• Knowledge of the HKSAR Government’s IT security policy and guidelines, and regulatory requirements such as C-RAF
• Understanding of cyber defence, incident response, common attack vectors, adversary tactics, techniques & procedures, and the MITRE ATT&CK framework
• Ability to do research and analyse thoroughly and resourcefully
• Self-driven and a good team player
• Good analytical, interpersonal and communication skills
• Candidates with supplementary experience and qualifications will also be considered, even if they do not meet all of the specified requirements above

Conditions of service

• Appointment will be offered by CMU OmniClear
• A competitive remuneration package will be offered. There is flexibility to take account of additional experience and qualifications
• Fringe benefits include medical and dental benefits and paid annual leave