- Hong Kong Hong Kong
全职 Manager – ITS Cyber-Security 工作, 薪水, YF Life Insurance International Limited Hong Kong 公司招聘中 - Ricebowl
分享
保存
工作地点
职位描述
岗位职责
YF Life Insurance International Ltd. is a major life insurance company in Hong Kong and Macau, providing one-stop risk- and wealth-management services. Our scope of business ranges from insurance, investment, and retirement to MPF.
To cope with our business expansion, we now invite dynamic and highly motivated individuals to join and grow with us.
Responsibilities:
Support the implementation, operation, and continuous improvement of the Company's Information Security and Cybersecurity Programme.
Perform cybersecurity operations, including security monitoring, vulnerability management, security reviews, and incident response activities.
Conduct risk assessments, vendor security assessments, and compliance reviews to ensure alignment with regulatory and industry requirements.
Perform security reviews throughout the SDLC, including security requirements review, architecture review, vulnerability assessment, source code scanning review, and remediation tracking.
Lead or participate in cybersecurity projects, security testing, implementation, and system enhancement initiatives.
Research emerging threats and technologies, prepare management reports and audit evidence, and provide occasional support during cybersecurity incidents or critical situations.
Requirements:
Degree in Computer Science, Cybersecurity, Information Security, Information Technology, or related disciplines.
Minimum 7 years of relevant experience in cybersecurity, information security, technology risk, IT risk, or related disciplines, preferably within insurance, banking, financial services, or other regulated industries.
Good understanding of cybersecurity controls and practices, including vulnerability management, incident response, cloud security, identity and access management, and security monitoring.
Familiarity with Secure SDLC, application security concepts, vulnerability assessment methodologies, and security testing practices.
Knowledge of regulatory and industry frameworks such as HKIA GL20, AMCM Cybersecurity Guidelines, ISO 27001, NIST CSF, or CIS Controls; relevant professional certifications would be an advantage.
Strong analytical, communication, and problem-solving skills, with a passion for cybersecurity and emerging technologies such as AI, cloud services, automation, and DevSecOps. Candidates with less experience will be considered for Assistant Manager or Senior Officer positions.
Attractive salary and fringe benefits, including 5-day work week, medical, life insurance, annual leave, pension scheme and training subsidies, etc. will be offered to this permanent appointment. Interested parties please send full resume, with academic results, current and expected salary to Human Resources Manager by clicking "APPLY NOW" . All information received will be used for recruitment purposes only.
Full-time
To cope with our business expansion, we now invite dynamic and highly motivated individuals to join and grow with us.
Responsibilities:
Support the implementation, operation, and continuous improvement of the Company's Information Security and Cybersecurity Programme.
Perform cybersecurity operations, including security monitoring, vulnerability management, security reviews, and incident response activities.
Conduct risk assessments, vendor security assessments, and compliance reviews to ensure alignment with regulatory and industry requirements.
Perform security reviews throughout the SDLC, including security requirements review, architecture review, vulnerability assessment, source code scanning review, and remediation tracking.
Lead or participate in cybersecurity projects, security testing, implementation, and system enhancement initiatives.
Research emerging threats and technologies, prepare management reports and audit evidence, and provide occasional support during cybersecurity incidents or critical situations.
Requirements:
Degree in Computer Science, Cybersecurity, Information Security, Information Technology, or related disciplines.
Minimum 7 years of relevant experience in cybersecurity, information security, technology risk, IT risk, or related disciplines, preferably within insurance, banking, financial services, or other regulated industries.
Good understanding of cybersecurity controls and practices, including vulnerability management, incident response, cloud security, identity and access management, and security monitoring.
Familiarity with Secure SDLC, application security concepts, vulnerability assessment methodologies, and security testing practices.
Knowledge of regulatory and industry frameworks such as HKIA GL20, AMCM Cybersecurity Guidelines, ISO 27001, NIST CSF, or CIS Controls; relevant professional certifications would be an advantage.
Strong analytical, communication, and problem-solving skills, with a passion for cybersecurity and emerging technologies such as AI, cloud services, automation, and DevSecOps. Candidates with less experience will be considered for Assistant Manager or Senior Officer positions.
Attractive salary and fringe benefits, including 5-day work week, medical, life insurance, annual leave, pension scheme and training subsidies, etc. will be offered to this permanent appointment. Interested parties please send full resume, with academic results, current and expected salary to Human Resources Manager by clicking "APPLY NOW" . All information received will be used for recruitment purposes only.
Full-time
重要安全守则
申请工作时，切勿提供您的银行或信用卡详细资料。不要转账或完成无关的在线调查问卷。如果您发现可疑内容，请举报此招聘广告。
了解更多