Hong Kong Monetary Authority Hiring! Full Time Senior Associate, IT - System Development (IT Security) (CMU OmniClear vacancy) in Hong Kong - Ricebowl

The Hong Kong Monetary Authority (HKMA) is charged with the responsibility for maintaining the stability and integrity of the monetary and financial systems of Hong Kong.

CMU OmniClear Limited (CMU OmniClear) is a wholly owned subsidiary of CMU OmniClear Holdings Limited, which is jointly owned by the Exchange Fund (as the majority shareholder) and Hong Kong Exchanges and Clearing Limited (as the minority shareholder). It carries out the operation and business development activities of the Central Moneymarkets Unit (CMU) on behalf of the HKMA. As part of the critical financial market infrastructure in Hong Kong, CMU is a central securities depository (CSD), providing secure and efficient clearing, settlement and custodian services for securities. CMU OmniClear’s vision is to continuously enhance CMU service coverage, expand connectivity with other markets and upgrade the CMU infrastructure to provide market participants with comprehensive and quality services.

We now invite eligible candidates to join our dynamic and inclusive company for the exciting opportunity below:

Senior Associate, IT & System Development (IT Security)

Key Responsibilities

• Assist in the implementation, operation and maintenance of IT security-related systems
• Safeguard information system assets by preventing, detecting and resolving security-related incidents
• Conduct security risk assessments across IT systems using standardised frameworks
• Perform vulnerability assessments and penetration tests, interpret findings and turn them into recommendations
• Perform proof-of-concept evaluation of IT security products
• Keep abreast of cyber security threats and security-related technologies, practices and regulations in the market, or from the government or other regulators
• Provide security advice to IT infrastructure and application counterparts in concluding security designs and related security infrastructure roadmaps
• Develop and conduct a cyber security awareness and training programme

Requirements

• University degree in computer science, information technology, cybersecurity or related fields
• At least 3 years of relevant experience in a well-established financial organisation or a leading financial institution, including security system project implementation and security operations
• In possession of certification in a CISP / CISSP / CISA or equivalent
• Knowledge of cloud security implementation
• Experience in securing blockchain applications in cloud environments is highly desirable
• Knowledge of the HKSAR Government’s security policy and guidelines; and regulatory requirements such as C-RAF
• Understanding of cyber defence, incident response, common attack vectors, adversary tactics, techniques & procedures, and the MITRE ATT&CK framework
• Ability to do research and analyse thoroughly and resourcefully
• Self-driven and a good team player
• Good analytical, interpersonal and communication skills
• Candidates with supplementary experience and qualifications will also be considered, even if they do not meet all of the specified requirements above

(Candidates with less experience may be considered for an offer of appointment at Associate level.)

Conditions of service

• Appointment will be offered by CMU OmniClear
• A competitive remuneration package will be offered. There is flexibility to take account of additional experience and qualifications
• Fringe benefits include medical and dental benefits and paid annual leave