Total 16 legal public security job vacancies in Information Technology category in central hong kong island

Responsibilities:

• Work as Network Consultant to work on Network infrastructure projects;
• Manage team for solution deployments;
• Handle Network infrastructure migrations;
• Work closely with Project Managers;

Requirements:

• Degree or above in Computer Science or IT related disciplines;
• 6 years or above experience in network infrastructure / security / wireless LAN infrastructure;
• Network experience on Cisco / Juniper / Huawei / H3C / Ruckus / HPE / Fortinet products;
• Hands-on experience on Cisco / Juniper / Huawei / HPE is preferred;
• Cisco CCIE / Huawei HCIE Level or equivalent is preferred;
• Security and WLAN experience may also be considered;
• Able to work independently;
• Good command in both spoken English and Chinese;
• Candidates with more experience may be considered as Senior Network Consultant.

Control Risks is currently looking to hire a Head of Security to support a global banking client and assume responsibility for the physical security of the client's offices and other commercial premises within Hong Kong.

As the Country level leader of physical security, the successful candidate will act as the key point of contact for operational security matters and will require excellent communication and account management skills to engage positively and proactively with stakeholders at all levels of the bank.

We are excited to hear from suitably qualified candidates, currently based in Hong Kong, with experience gained in a commercial security, law enforcement, or a facilities management background with prior security responsibilities.

Responsibilities:

• Lead and mentor a team of direct employees and vendors responsible for the physical security of branches, offices, and other facilities within country.
• On a routine basis, monitor security personnel and security system performance to ensure all security, safety and compliance requirements are met, including service delivery of all security related vendors.
• Devise local procedures for access control, CCTV surveillance and alarm monitoring in alignment with global and local standards.
• Ensure in-country security system maintenance, minor project works, and software/hardware upgrades are executed in alignment with bank stakeholder requirements, global and local standards.
• Manage security and safety incidents, follow-up investigation and reporting to all stakeholders.
• Conduct local risk assessments, makes recommendations on physical security measures and implements them in accordance with global and local standards.
• Ensure security training, certification, tests & drills are periodically conducted, and records maintained.
• Keep senior level management informed on key issues, risks and incidents.

• High School Diploma or above.
• 4-6 years prior commercial security and/or law enforcement related experience. Candidates from a Facilities Management background with prior security responsibilities will be considered.
• Proven managerial and leadership ability.
• Excellent communicator at all levels of the organisation
• Able to comprehend and interpret most business documents.
• Able to respond effectively to the most sensitive issues.
• Able to write reports and manuals.
• Able to make effective and persuasive presentations on security training, concepts, and procedures to both staff, public groups and senior management stakeholders.
• Able to forecast and prepare annual budgets, including basic financial analysis to support justification of security expenditure.
• Working knowledge of Microsoft Word/Excel.
• Excellent understanding of the operation of Access Control, CCTV & Burglar Alarm systems.
• Basic knowledge of IP networks.
• Good written and oral English. Fluency in Cantonese is preferred.

Prenetics, a leading genomics-driven health sciences company, is revolutionizing prevention, early detection, and treatment. Our prevention arm, CircleDNA, uses whole exome sequencing to offer the world's most comprehensive consumer DNA test. Insighta, our $200 million joint venture with renowned scientist Prof. Dennis Lo, underscores our unwavering commitment to saving lives through pioneering multi-cancer early detection technologies. Insighta plans to introduce Presight for lung and liver cancers in 2025, and to expand with Presight One for 10+ cancers in 2027. Lastly, ACT Genomics, our treatment unit, is the first Asia-based company to achieve FDA clearance for comprehensive genomic profiling of solid tumors via ACTOnco. Each of Prenetics' units synergistically enhances our global impact on health, truly embodying our commitment to 'enhancing life through science.

We are seeking a highly skilled and experienced Legal Counsel to oversee all legal matters and ensure compliance with the legal updates and obligations of a listed company. The ideal candidate will have extensive experience in dealing with the legal requirements of a publicly traded company, preferably on NASDAQ, and possess a deep understanding of corporate law, securities regulation, and corporate governance. Less experienced candidates would be considered for the Senior Legal Counsel role.

Key Responsibilities:

• Provide legal advice and support on a wide range of corporate, securities, and regulatory matters related to the company’s status as a NASDAQ-listed entity.
• Ensure compliance with all applicable securities laws, regulations, and reporting requirements, including the Sarbanes-Oxley Act, SEC filings, and NASDAQ listing rules.
• Oversee the preparation and submission of periodic reports, proxy statements, and other SEC filings.
• Advise on corporate governance best practices and assist in the development and implementation of corporate policies and procedures.
• Monitor and analyze changes in laws and regulations that may affect the company and ensure timely and effective communication of relevant updates to the executive team and board of directors.
• Provide legal support for corporate transactions, including mergers and acquisitions, financings, and other strategic initiatives.
• Draft, review, and negotiate a wide range of commercial contracts and agreements.
• Manage and coordinate with external legal counsel on various legal matters.
• Provide training and guidance to internal teams on legal and regulatory compliance.
• Support the board of directors and executive team with legal and strategic advice on corporate matters.
• Oversee company secretarial matters.
• Manage the employee share incentive plan, including overseeing the ESOP platform, grant letters, and arranging for issuances
• Manage the IP portfolio, including trademarks and patents
• Engage with relevant product/business units to support the legal aspects of product/service launches.

• LLB, or Juris Doctor (JD) degree or equivalent from an accredited law school.
• Licensed to practice law in a common law jurisdiction, such as Hong Kong or England, Malaysia. A big plus for candidates with US Bar.
• A minimum of 10 years of legal experience, with at least 3 years of experience in a publicly traded company, preferably on NASDAQ or NYSE.
• In-depth knowledge of securities laws, corporate governance, and regulatory compliance.
• Proven experience in preparing and submitting exchange filings and reports, especially SEC filings and reports.
• Strong understanding of corporate transactions, including mergers and acquisitions, financings, and other strategic initiatives.
• Excellent drafting, negotiation, and communication skills.
• Ability to work independently and manage multiple projects simultaneously.
• Strong analytical and problem-solving skills.
• High ethical standards and a commitment to maintaining confidentiality and integrity.
• Experience with handling regional legal matters

Preferred Qualifications:

• Experience in the health sciences or biotechnology industry.
• Previous experience in a similar role within a fast-paced and dynamic environment.
• Strong interpersonal skills and the ability to work effectively with cross-functional teams.

Our DNA is P-R-E-N-E-T-I-C-S. See what each word of our company name means:

Get to know us; Get to know our DNA!

Passion

• You are passionate about our mission and your job, and inspire others with your drive for excellence.

Resilience

• You are tenacious and calm despite challenges, changes, and stress. Sleeves rolled up, you attack every challenge head-on.

Empowerment

• You help colleagues across Prenetics succeed. You foster a strong team spirit while encouraging others to take initiatives and risks.

Integrity

• You are trustworthy, honest and accountable to your actions and commitments.

Epic

• You dare to take risks, deliver results and make things happen. You possess a growth mind-set and strive to continuously improve.

Transparency

• You speak up and share information even if it is controversial or difficult.
• You share wins and failures openly.

Ingenuity

• You make wise decisions despite ambiguity.
• You think outside the box, challenge the status quo and come up with creative solutions.

Communication

• You practice empathy, articulate your thoughts and ideas effectively and respectfully.

Selfless

• You seek what is best for Prenetics, not yourself or your team. You put the needs of the team before your own.

Company Description My client is a global conglomerate with a strong business presence in APAC. We are looking for an Information Security Manager to join the regional team. Role Description As an Information Security Manager, you will be responsible for executing and implementing security policies, compliance, framework and strategy to global teams and work closely with business units and stakeholders on meeting regulatory requirements. Ensuring that security policies and regulations are met. This role requires strong communication skills as you will be working with many executive levels within each business to roll out and unify current security policies with group level. Qualifications At lease 5 years of solid experience in Information Security Information Security related background. CISSP/ CISA/ CISP candidates are preferred Strong communication skills to coordinate and connect with peoples at all level Proficient in English, Cantonese and Mandarin Ability to coordinate and connect with stakeholders to deliver results Bachelor's or Master's degree in Computer Science, Information Technology, or related field What's in it for you? Flexible working hours Work from home options Highly competitive salary Fun, young working culture with a newly renovated office Convenient working location (HK Island)

The ideal candidate would be responsible for  - Experience leading security architecture reviews and able to challenge risk assesments within the business.  - Technical understanding and ability to meet the regulators needs. - Control frameworks within applications to satisfy the regulators. - Strong understanding of HKMA & MAS regulatory guidelines. - Be confident and vocal to guide the business through any framework changes.

Responsibilities: Develop and maintain an enterprise-wide information security strategy, aligned with industry best practices and regulatory requirements. Establish and enforce information security policies, procedures, guidelines, and standards to maintain the confidentiality, integrity, and availability of data and systems. Conduct risk assessments to identify existing and potential security vulnerabilities, and develop effective risk mitigation plans. Oversee the implementation of security controls and technologies to protect against unauthorized access, data breaches, and other security incidents. Collaborate with various stakeholders, such as IT, Legal, Compliance, and Business Units, to ensure timely response to security incidents, and to ensure that security requirements are incorporated into business processes and solutions. Monitor and analyze security events, conduct investigations, and coordinate incident response activities to minimize the impact of security incidents. Keep abreast of emerging security threats, vulnerabilities, and technologies, and provide recommendations to enhance the organization's overall security posture. Conduct regular security awareness training and education programs for employees, to promote a culture of security awareness and compliance. Coordinate with external auditors and regulatory bodies to address security and compliance requirements, and assist in audits and assessments. Manage relationships with external vendors and partners, regarding security-related products, services, and contracts. Requirements: Bachelor's degree in Computer Science, Information Security, or a related field. Advanced certifications such as CISSP, CISM, or CRISC are highly desirable. Minimum of 10 years of experience in information security, risk management, or a related field, with at least 3 years in a managerial role. In-depth knowledge of information security principles, frameworks, technologies, and best practices. Strong understanding of relevant regulations and standards, such as GDPR, ISO 27001, and NIST. Proven experience in conducting risk assessments, developing risk mitigation strategies, and implementing risk management frameworks. Excellent leadership, communication, and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and senior management. Strong analytical and problem-solving abilities, with the capability to think strategically and apply sound judgment in complex situations. Experience in managing security incidents, conducting investigations, and coordinating incident response activities. Knowledge of cloud security, network security, application security, and secure software development practices is preferred. Demonstrated ability to manage multiple projects and priorities, and deliver results within deadlines. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Leslie Ho at [email protected] and put Information Security and Risk Senior Manager - Leading Property Group in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371)  We are also seeking top-calibre candidates for the following exciting roles: 1) Azure Cloud Infrastructure Architect - Leading Insurance Group 2) Platform and Infrastructure Business Analyst - Leading Financial Institution 3) IT Security Business Analyst - Leading Financial Institution

Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all." Job Summary: The Information Security Team consists of Security Strategy and Solution Architecture team, Security engineering and Operations team, Threat Management team as well as Security Governance business. Job Duties: The Security Solution Architect is accountable for IT security architecture, design and solution engineering, meeting agreed requirements aligned to the Information Security and business strategy. Reporting to Principal Security Architect, the incumbent will work collaboratively with Enterprise Architecture, Enterprise Security Architects, Security Engineering, Security Services Operations, Security Operations Centre team and Project Delivery team. This role will translate the group-wide information security strategy, policy and control requirements into secure solutions. This role need to balance between unique business objectives of a global exchange against the inherent security threat and risk profile applicable to critical national infrastructure. Also helps reviewing and providing security requirement inputs or security integration architecture for business led projects. Responsibilities Responsibility for ensuring the agreed information and cyber security architecture and solution designs are engineered to specification and within acceptable risk tolerance. Work with Security Services and Security Engineering subject matter experts to ensure that security services/systems are architected with engineering and operational requirements built in. Work within governance forums such as Enterprise Architecture Board, HKEX Group Security Architecture Committee and Group Security Architecture Working Group. Design and develop security solutions in accordance with the HKEX System Development Lifecycle, Application and application code security architecture and documentation standards. Create and review functional and non-functional security requirements, including all additional requirements for InfoSec and Cyber projects. Review system architecture and designs to ensure all solutions have undergone appropriate assurance and meet security acceptance criteria. Develop and present reference patterns for security architecture and technical security standards to meet Information Security Policy Contribute to the security technology strategy, security architecture roadmap, maturity model, policies and standards. Support day-to-day activities of the Information Security Strategy and Solution Architecture function ensuring Operating Level Agreements are met. Requirements University degree in Computer Science, Information Management, or related fields Relevant experience with information security and enterprise architecture methods and frameworks (e.g., SABSA, TOGAF, NIST CSF) Cyber Security certifications, such as SABSA, CCSP (Certified Cloud Security Professional), CISSP (Certified Information Systems Security Professional) or security specific cloud certifications such as AWS, Azure, GCP, AliBaba Cloud, Kubernetes, etc. Relevant experience of software and system assurance methodologies and associated vulnerability management and risk management practices. Relevant experience with industry best-practice approaches to the design, implementation, operations, and management of IT systems (e.g., Agile, Waterfall, ITIL, COBIT). Up-to-date experience of delivering solutions security in public and/or private cloud. Experience of developing/ contributing to security policies and standards. Current experience securing automated build and deployment pipelines and securing artefacts An intelligent, articulate, consensus building and persuasive leader. Must have a strong business acumen and technology knowledge, who can serve as an effective member as part the IT management team. Must be able to communicate information security-related concepts to a broad range of technical and non-technical audiences. Experience of effective stakeholder management and senior level reporting. Able to work effectively in a matrix management environment. Able to deliver within a fast-moving high-pressure environment, balancing multiple work streams and deliverables. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace. Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Permanent

Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Contract Job Summary: The Information Security Engineer is responsible for designing, building and maintaining enterprise IT security solutions to address the organization's security requirements. Reporting to the Information Security Services Lead, this role will work closely with IT Innovation Lab, software engineering teams, IT infrastructure team, IT compliance, security operations and cyber technology risk team. You play a key role in protecting the organization. Job Duties: Responsibilities: Engineer, implement and monitor security measures for the protection of computer systems, networks and information Identify and define system security requirements Design computer security architecture and develop detailed cyber security designs Configure and troubleshoot security systems and infrastructure devices Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services, especially SIEM Delivery security service on-boarding such as connecting systems to SIEM Review IT systems to ensure that they have met security acceptance criteria. Work with product vendors and suppliers to maintain and enhance existing security tooling and products Ensure that the organization security tools can detect and help with the response to cyber security incidents. Document and validate disaster recovery testing for CyberSecurity tools. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancements Support in managing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials. Design and execute processes to make BAU changes to security tools Automate or script changes and validation processes Requirements: Proven work experience as a System Security Engineer or Information Security Engineer Experience in building, maintaining and operating security systems and platforms Hands on experience in a number of security systems, including log management, content filtering, SOC tools, threat detection etc Experience with network security and networking technologies and with system, security, and network monitoring tools Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust, etc) Problem solving skills and ability to work under pressure Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of technical/non-technical audiences. Strong written communication skills and verbal presentations to senior management. Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience. Good presentation, project planning and documentation skills Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols Familiarity with application, database and operating system security Familiarity with cloud security technologies (AWS or Azure is preferred) Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3FEND, OWASP, NIST Cybersecurity Framework Familiarity in scripting or automation is an added advantage Familiarity with Identity and Lifecycle management is an advantage Previous experience in regulated environments is an added advantage Company Introduction: Hong Kong Exchanges and Clearing Limited (HKEX) is one of the world's major exchange groups, and operates a range of equity, commodity, fixed income and currency markets. HKEX is the world's leading IPO market and as Hong Kong's only securities and derivatives exchange and sole operator of its clearing houses, it is uniquely placed to offer regional and international investors access to Asia's most vibrant markets. As the global markets leader in the Asian time-zone, we offer a world of opportunities for early careers and experienced hires. Here, we know that diverse thinking fosters better solutions, and we are committed to building an open and dynamic environment which allows our business to innovate and our people to thrive. Discover the latest career opportunities and programmes at HKEX. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Responsibilities: Act as the SME to review application architectures in Application, Infrastructure, Cloud Computing, Mobile Technology, and Electronic Trading.  Lead the technology assessment across application security including Session Security, Vulnerability/PenTesting items, and Input Validation.  Review applications including Authentication, Authorization, and Auditing.  Review security reference architecture and security blueprints.  Develop and maintain security architecture artifacts.  Act as a Security SME and review implementation design to the application and Infrastructure team, where it will meet the industry security standards. Conduct Technical risk assessments to capture security exceptions and design associated compensating controls based on the assessment results.    Define and maintain the infrastructure and application security framework and provide security assessments.  Requirements:  At least 10 years of experience in the IT Application Security space.  Ability to articulate security principles and security risks to non-technical business stakeholders Security Certificates in CISSP, CISM or equivalent. Knowledge of the common application layer vulnerabilities (eg. OWASP 10), ability to explain these risks, and recommend countermeasures to mitigate these risks. Extensive knowledge of application, network, and platform security vulnerabilities. Ability to explain these vulnerabilities to developers.  Ability to review the code of enterprise applications and identify possible security vulnerabilities. Experience in conducting Information Security, IT Security, and Audit assessments. Presenting the outcomes of the evaluation and obtaining buy-in. Strong focus on reviewing technical designs and functional requirements to identify areas of Security weakness. Working experience in security areas including Authentication (SAML, SiteMinder, Kerberos, OpenID), Data Protection, App Security, and Cryptography.  Excellent communication skills in English, this role will work with regional counterparts.  Bachelor's Degree in Computer Science or related field from a reputable University. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Danny Kwan at [email protected] and put Security Architect - Leading Financial Institution in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371) We are also seeking top-calibre candidates for the following exciting roles: 1) C#. NET API Messaging DevOps Associate - Leading Investment Bank  2) Mobile Tech Business Analyst - Private Wealth Management 3) Rust Trading Systems Engineer - Crypto Start-Up

Responsibilities: Conduct risk assessments and vulnerability scans on the application portfolio to identify any potential security risks. Collaborate with cross-functional IT teams to remediate identified vulnerabilities and ensure the overall security of our applications. Define and implement application security controls and guidelines in line with industry best practices and regulatory requirements. Conduct regular security reviews and audits of our application portfolio to ensure compliance with security policies and standards. Monitor and respond to security incidents, including investigating, analyzing, and reporting any potential threats or breaches. Stay up-to-date with the latest IT security trends, industry standards, and regulatory requirements to proactively address emerging threats and risks. Provide guidance and support to development teams on secure coding practices and application security testing. Collaborate with other IT teams to develop and maintain secure application architectures and deployment practices. Assist in the development and maintenance of IT risk management frameworks, policies, and procedures. Work closely with internal and external auditors to provide necessary information and ensure compliance with audit requirements. Qualifications and Skills: Bachelor's degree in Information Technology, Computer Science, or a related field. Minimum of 8 years of experience in IT risk management, application security, or related roles in a financial institution or similar industry. Strong understanding of IT risk management principles, application security best practices, and regulatory requirements (e.g., NIST Cybersecurity Framework, ITIL, CMMI, ITSM, COBIT, and PMBOK) Experience with application security assessment tools and frameworks (e.g., OWASP, Fortify, Burp Suite). Knowledge of secure coding practices, security testing methodologies, and common application vulnerabilities. Familiarity with financial services industry regulations and compliance requirements. Professional certifications such as CISSP, CISA, CISM, or equivalent are highly desirable. Excellent analytical and problem-solving skills, with the ability to identify and mitigate potential security risks. Strong communication in English and Chinese (Cantonese / Mandarin) and interpersonal skills, with the ability to collaborate effectively with cross-functional teams. Ability to work independently, prioritize tasks, and manage multiple projects simultaneously. Proven ability to adapt to a fast-paced and changing environment. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Danny Kwan at [email protected] and put IT Risk and Security Associate (Application) - Leading Financial Institution in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371)  We are also seeking top-calibre candidates for the following exciting roles: 1) Python Developer - Leading Asset Management Firm 2) Security Architect - Leading Investment Bank 3) IT Support Engineer - Top Investment Bank

Responsibilities: Act as the SME to review the security architecture in Application, Infrastructure, Cloud Computing, and banking/trading applications.  Lead the technology assessment and security controls reviews, including scope, roadmap, and testing plans for key cybersecurity controls. Working with different teams across the bank for project security assessments: both high- and low-level architecture designs, and providing recommendations to mitigate identified risks and ensure compliance with relevant regulatory requirements, etc. Review applications including Authentication, Authorization, and Auditing.  Review security reference architecture and security blueprints.  Third-party risk assessments, regulatory reviews, as well as participating in regional and global governance meetings and committees when required. Requirements:  At least 10 years of experience in the IT Application Security space.  Ability to articulate security principles and security risks to non-technical business stakeholders Security Certificates in CISSP, CISM, or equivalent. Knowledge of the common application layer vulnerabilities (eg. OWASP 10), ability to explain these risks, and recommend countermeasures to mitigate these risks. Extensive knowledge of application, network, platform security vulnerabilities, and security hardening standards (eg. NIST).  Ability to explain these vulnerabilities to developers.  Ability to review the code of enterprise applications and identify possible security vulnerabilities. Experience in conducting Information Security, IT Security, and Audit assessments. Presenting the outcomes of the evaluation and obtaining buy-in. Strong focus on reviewing technical designs and functional requirements to identify areas of Security weakness. Excellent communication skills in English, this role will work with senior peers and stakeholders across the region.  Bachelor's degree in Computer Science, Engineering (or related) from a reputable University. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Leslie Ho at [email protected] and put Security Architect - Leading Investment Bank in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371) We are also seeking top-calibre candidates for the following exciting roles: 1) Lead DevOps Engineer - Global Financial Institution 2) Project Manager, Cloud/Infrastructure Delivery 3) Senior Manager, Infrastructure (Server Platform)

about the company. Randstad is working with a insurance firm with sizeable business at global. They provide multi-line insurer for both people and businesses. Now their IT department is looking for an experienced Information Security Analyst to join them. You will mainly support the IT Security governance activities across Hong Kong and China business. about the job. Ensure the Global/Regional missions related to information security are consistently and effectively executed across the APAC region. Ensure a solid understanding and effective management of IT security controls, taking necessary actions to address any identified gaps. Validate the security metrics provided by the Group and take proactive steps to resolve security issues, including vulnerabilities, coverage of security technologies, application security, and technical control compliance. Collaborate with the Risk Management team to evaluate and assess the level of Cyber Risk exposure for business units, working together to implement appropriate risk mitigation measures. Work closely with relevant parties to conduct IT security assessments and take necessary actions to address any identified issues. Collaborate with the Global Application Security team to ensure that IT security controls are implemented at every stage of the application development process. skills & experiences required. A bachelor's degree and around 4-6 years of relevant experience in information security, preferably in a multinational working environment. Additional qualifications such as CISSP, CISA, and/or CISM are advantageous. A good understanding of operating system platforms and security models, as well as a broad range of IT technologies and processes including databases, networking, web/application security, change management, SDLC, and disaster recovery. Sound knowledge of common IT security tools. Strong communication skills in both written and spoken English and Chinese (Cantonese and Mandarin). The ability to effectively explain security concepts to both technical and non-technical staff is important. how to apply. To apply online, please click on the link below. Alternatively, for a confidential discussion please contact Pauline Peng at [email protected]

Responsibilities: Lead the independent department to deliver on the transformation process of the Bank in order to achieve business objectives and strategies and to improve customer experience in a timely manner Plan and design the Bank’s digital transformation roadmap and strategy Manage and implement the bank’s digital projects related to digitalization of work process and deployment of mobilization technology Provide expertise to ensure that the Bank’s key digital transformation projects are run to time and with a high quality Manage E-Banking Team and its related projects Collaborate with business users and provide User Requirement to IT Department Collaborate and negotiate with IT Department and vendors for digital projects Responsible for the vendor selection, price quotation / negotiation and cost evaluation Requirements: University degree in Business Information Systems, Business Administration, e-Commerce, IT or other related field with minimum 10 years IT / digital working experience, of which minimum 7 years at managerial level Good knowledge on IT infrastructure, cyber security, transformation, digital market trend and latest technology in banking industry, especially on internet and mobile platforms Familiar with banking / financial products & services / operations / regulations Solid experience in managing projects of business process improvement Experience in banking industry will be an added advantage Good knowledge on management skill & people management and vendor management Good command of written and spoken English and Chinese

Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Contract Job Summary: The Information Security Engineer is responsible for designing, building and maintaining enterprise IT security solutions to address the organization's security requirements. Reporting to the Information Security Services Lead, this role will work closely with IT Innovation Lab, software engineering teams, IT infrastructure team, IT compliance, security operations and cyber technology risk team. You play a key role in protecting the organization. Job Duties: Responsibilities Engineer, implement and monitor security measures for the protection of computer systems, networks and information Identify and define system security requirements Design computersecurity architecture and develop detailed cyber securitydesigns Configure and troubleshoot security systems and infrastructure devices Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services. Work with handling service requests on security tool standard changes, such as proxy whitelisting requests Delivery security service on-boarding such as security agent install, connecting systems to SIEM Review IT systems to ensure that they have met security acceptance criteria. Work with product vendors and suppliers to maintain and enhance existing security tooling and products Ensure that the organization security tools can detect and help with the response to cyber security incidents. Document and validate disaster recovery testing for CyberSecurity tools. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement s Support in m anag ing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials. Design and execute processes to make BAU changes to security tools ( eg web proxy changes, DLP mail rule changes, etc ) Automate or script changes and validation processes Requirements: Proven work experience as a System Security Engineer or Information Security Engineer Experience in building, maintaining and operating security systems and platforms Hands on experience in a number of security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, data loss prevention systems, web proxies, etc Experience with network security and networking technologies and with system, security, and network monitoring tools Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust , etc ) Problem solving skills and ability to work under pressure Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of te chnical /non-technical audiences . Strong written communication skills and verbal presentations to senior management . Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience. Good presentation , project planning and document ation skills Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols Familiarity with application, database and operating system security Familiarity with cloud security technologies (AWS or Azure is preferred) Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3 FEND, OWASP, NIST Cybersecurity Framework Familiarity in scripting or automation is a n added advantage Familiarity with Identity and Lifecycle management is an advantage Previous experience in regulated environments is an added advantage Company Introduction: Hong Kong Exchanges and Clearing Limited (HKEX) is one of the world's major exchange groups, and operates a range of equity, commodity, fixed income and currency markets. HKEX is the world's leading IPO market and as Hong Kong's only securities and derivatives exchange and sole operator of its clearing houses, it is uniquely placed to offer regional and international investors access to Asia's most vibrant markets. As the global markets leader in the Asian time-zone, we offer a world of opportunities for early careers and experienced hires. Here, we know that diverse thinking fosters better solutions, and we are committed to building an open and dynamic environment which allows our business to innovate and our people to thrive. Discover the latest career opportunities and programmes at HKEX. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Permanent Job Summary: The Information Security Engineer is responsible for designing, building and maintaining enterprise IT security solutions to address the organization's security requirements. Reporting to the Information Security Services Lead, this role will work closely with IT Innovation Lab, software engineering teams, IT infrastructure team, IT compliance, security operations and cyber technology risk team. You play a key role in protecting the organization. Job Duties: Responsibilities: Engineer, implement and monitor security measures for the protection of computer systems, networks and information Identify and define system security requirements Design computersecurity architecture and develop detailed cyber securitydesigns Configure and troubleshoot security systems and infrastructure devices Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services. Work with handling service requests on security tool standard changes, such as proxy whitelisting requests Delivery security service on-boarding such as security agent install, connecting systems to SIEM Review IT systems to ensure that they have met security acceptance criteria. Work with product vendors and suppliers to maintain and enhance existing security tooling and products Ensure that the organization security tools can detect and help with the response to cyber security incidents. Document and validate disaster recovery testing for CyberSecurity tools. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement s Support in m anag ing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials. Design and execute processes to make BAU changes to security tools ( eg web proxy changes, DLP mail rule changes, etc ) Automate or script changes and validation processes Requirements: Proven work experience as a System Security Engineer or Information Security Engineer Experience in building, maintaining and operating security systems and platforms Hands on experience in a number of security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, data loss prevention systems, web proxies, etc Experience with network security and networking technologies and with system, security, and network monitoring tools Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust , etc ) Problem solving skills and ability to work under pressure Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of te chnical /non-technical audiences . Strong written communication skills and verbal presentations to senior management . Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience. Good presentation , project planning and document ation skills Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols Familiarity with application, database and operating system security Familiarity with cloud security technologies (AWS or Azure is preferred) Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3 FEND, OWASP, NIST Cybersecurity Framework Familiarity in scripting or automation is a n added advantage Familiarity with Identity and Lifecycle management is an advantage Previous experience in regulated environments is an added advantage Company Introduction: Hong Kong Exchanges and Clearing Limited (HKEX) is one of the world's major exchange groups, and operates a range of equity, commodity, fixed income and currency markets. HKEX is the world's leading IPO market and as Hong Kong's only securities and derivatives exchange and sole operator of its clearing houses, it is uniquely placed to offer regional and international investors access to Asia's most vibrant markets. As the global markets leader in the Asian time-zone, we offer a world of opportunities for early careers and experienced hires. Here, we know that diverse thinking fosters better solutions, and we are committed to building an open and dynamic environment which allows our business to innovate and our people to thrive. Discover the latest career opportunities and programmes at HKEX. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.

Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Contract Job Summary: The Information Security Team consists of the security strategy and solution architecture team, the security engineering and operations team, the threat management team as well as the security governance business. This role sits within the security engineering team managing the build out and operations of the IT security solutions. Job Duties: As Information Security Engineer of HKEX, you will be responsible for designing, building and maintaining enterprise IT security solutions to address the organization's security requirements. Reporting to the Information Security Services Lead, this role you will have the opportunity to work closely with IT Innovation Lab, software engineering teams, IT infrastructure team, IT compliance, security operations and technology risk management teams. You play a key role in protecting the organization. Responsibilities: Engineer, implement and monitor security measures for the protection of computer systems, networks and information. Identify and define system security requirements. Design computersecurity architecture and develop detailedcyber securitydesigns Configure and troubleshoot security systems and infrastructure devices Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services. Work with handling service requests on security tool standard changes, such as proxy whitelisting requests Delivery security service on-boarding such as security agent install, connecting systems to SIEM Review IT systems to ensure that they have met security acceptance criteria. Work with product vendors and suppliers to maintain and enhance existing security tooling and products Ensure that the organization security tools can detect and help with the response to cyber security incidents. Document and validate disaster recovery testing for CyberSecurity tools. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancements Support in managing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials. Design and execute processes to make BAU changes to security tools (e.g., web proxy changes, DLP mail rule changes, etc.) Automate or script changes and validation processes Requirements: University degree in Computer Science, Information Management, or related field, or equivalent experience. Proven work experience as a System Security Engineer or Information Security Engineer. Minimum 8 years of relevant work experience in building, maintaining and operating security systems and platforms. Hands on experience in a number of security technologies, including vulnerability management, cloud posture management, WAF, code security scan, SIEM, firewalls, intrusion detection systems, EDR, anti-virus software, authentication systems, log management, content filtering, data loss prevention systems, web proxies, SASE, PAM, SOAR, HSM, CA, etc. Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust, etc.). Strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of technical/non-technical audiences. Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols. Familiarity with application, database and operating system security Familiarity with cloud security technologies is preferred Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3FEND, OWASP, NIST Cybersecurity Framework is an added advantage Familiarity in scripting or automation is an added advantage Familiarity with Identity and Lifecycle management is an advantage Good presentation, project planning and documentation skills Candidate with complimentary experiences and skills would also be considered Company Introduction: Hong Kong Exchanges and Clearing Limited (HKEX) is one of the world's major exchange groups, and operates a range of equity, commodity, fixed income and currency markets. HKEX is the world's leading IPO market and as Hong Kong's only securities and derivatives exchange and sole operator of its clearing houses, it is uniquely placed to offer regional and international investors access to Asia's most vibrant markets. As the global markets leader in the Asian time-zone, we offer a world of opportunities for early careers and experienced hires. Here, we know that diverse thinking fosters better solutions, and we are committed to building an open and dynamic environment which allows our business to innovate and our people to thrive. Discover the latest career opportunities and programmes at HKEX. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.