- Hong Kong Hong Kong
DA INTERNATIONAL FINANCIAL SERVICE LIMITED Hiring! Full Time IT Operations - Security Engineer in Hong Kong - Ricebowl
Share
Save
Working Location
Job Description
Responsibilities
We are seeking a mid-level technical professional with a solid foundation in IT operations and hands-on cyber security experience. As a core member of the group's IT team, this role will handle escalated IT support (Help Desk) and basic system/network maintenance. More importantly, this role will be independently responsible for daily security monitoring, drafting security manuals, and maintaining/executing BCP/DR plans for our three financial brokerage entities (HK, SG, US), ensuring daily IT operations comply with foundational financial security and regulatory standards.
Key Responsibilities
1.IT Operations & Escalated Support (Help Desk & Operations):
Resolve escalated IT issues, including complex desktop troubleshooting, network connectivity issues, and in-depth troubleshooting of office software.
Independently manage enterprise IT infrastructure, including Active Directory (AD), Office 365 tenant administration, Mobile Device Management (MDM), and basic server maintenance.
2.Cyber Security & Daily Monitoring (Cyber Security & Monitoring):
Independently draft, update, and maintain the group’s cyber security manuals, IT operational procedures, and user security guidelines.
Conduct daily security monitoring, including reviewing firewall logs, managing antivirus/EDR consoles, triaging security alerts, and executing regular vulnerability scans and patch management.
Act as the first responder for security incidents, handling medium-complexity events (e.g., phishing email analysis, malware isolation) and drafting incident reports.
3.Business Continuity & Disaster Recovery (BCP & DR):
Responsible for writing and updating BCP and DR plan documentation for core business systems.
Independently plan, coordinate, and lead regular backup restoration tests and DR drills, evaluate the results, and report improvement recommendations to management.
Basic Network & Compliance Management:
Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.
Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.
4.Basic Network & Compliance Management :
Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.
Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.
Requirements
Bachelor’s degree in Computer Science, Information Technology, or a related field required. Over 5 years of combined experience in IT operations and cyber security.
Fluent in both English and Mandarin.
Proficient in Windows/Mac desktop support. Solid networking foundation, capable of independently configuring and managing enterprise firewalls (e.g., Fortinet, Palo Alto, Cisco), switches, and routers.
Familiar with the operation of mainstream security tools, such as Antivirus/EDR, vulnerability scanners (e.g., Nessus, OpenVAS), and basic SIEM log analysis.Understand common cyberattack vectors.
Familiar with the basic requirements of ISO 27001, SOC 2, or financial industry IT audits.
Full-time
Key Responsibilities
1.IT Operations & Escalated Support (Help Desk & Operations):
Resolve escalated IT issues, including complex desktop troubleshooting, network connectivity issues, and in-depth troubleshooting of office software.
Independently manage enterprise IT infrastructure, including Active Directory (AD), Office 365 tenant administration, Mobile Device Management (MDM), and basic server maintenance.
2.Cyber Security & Daily Monitoring (Cyber Security & Monitoring):
Independently draft, update, and maintain the group’s cyber security manuals, IT operational procedures, and user security guidelines.
Conduct daily security monitoring, including reviewing firewall logs, managing antivirus/EDR consoles, triaging security alerts, and executing regular vulnerability scans and patch management.
Act as the first responder for security incidents, handling medium-complexity events (e.g., phishing email analysis, malware isolation) and drafting incident reports.
3.Business Continuity & Disaster Recovery (BCP & DR):
Responsible for writing and updating BCP and DR plan documentation for core business systems.
Independently plan, coordinate, and lead regular backup restoration tests and DR drills, evaluate the results, and report improvement recommendations to management.
Basic Network & Compliance Management:
Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.
Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.
4.Basic Network & Compliance Management :
Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.
Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.
Requirements
Bachelor’s degree in Computer Science, Information Technology, or a related field required. Over 5 years of combined experience in IT operations and cyber security.
Fluent in both English and Mandarin.
Proficient in Windows/Mac desktop support. Solid networking foundation, capable of independently configuring and managing enterprise firewalls (e.g., Fortinet, Palo Alto, Cisco), switches, and routers.
Familiar with the operation of mainstream security tools, such as Antivirus/EDR, vulnerability scanners (e.g., Nessus, OpenVAS), and basic SIEM log analysis.Understand common cyberattack vectors.
Familiar with the basic requirements of ISO 27001, SOC 2, or financial industry IT audits.
Full-time
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.
Learn More