Total 4 job vacancies by Pinpoint Asia

Responsibilities: Develop and maintain an enterprise-wide information security strategy, aligned with industry best practices and regulatory requirements. Establish and enforce information security policies, procedures, guidelines, and standards to maintain the confidentiality, integrity, and availability of data and systems. Conduct risk assessments to identify existing and potential security vulnerabilities, and develop effective risk mitigation plans. Oversee the implementation of security controls and technologies to protect against unauthorized access, data breaches, and other security incidents. Collaborate with various stakeholders, such as IT, Legal, Compliance, and Business Units, to ensure timely response to security incidents, and to ensure that security requirements are incorporated into business processes and solutions. Monitor and analyze security events, conduct investigations, and coordinate incident response activities to minimize the impact of security incidents. Keep abreast of emerging security threats, vulnerabilities, and technologies, and provide recommendations to enhance the organization's overall security posture. Conduct regular security awareness training and education programs for employees, to promote a culture of security awareness and compliance. Coordinate with external auditors and regulatory bodies to address security and compliance requirements, and assist in audits and assessments. Manage relationships with external vendors and partners, regarding security-related products, services, and contracts. Requirements: Bachelor's degree in Computer Science, Information Security, or a related field. Advanced certifications such as CISSP, CISM, or CRISC are highly desirable. Minimum of 10 years of experience in information security, risk management, or a related field, with at least 3 years in a managerial role. In-depth knowledge of information security principles, frameworks, technologies, and best practices. Strong understanding of relevant regulations and standards, such as GDPR, ISO 27001, and NIST. Proven experience in conducting risk assessments, developing risk mitigation strategies, and implementing risk management frameworks. Excellent leadership, communication, and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and senior management. Strong analytical and problem-solving abilities, with the capability to think strategically and apply sound judgment in complex situations. Experience in managing security incidents, conducting investigations, and coordinating incident response activities. Knowledge of cloud security, network security, application security, and secure software development practices is preferred. Demonstrated ability to manage multiple projects and priorities, and deliver results within deadlines. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Leslie Ho at [email protected] and put Information Security and Risk Senior Manager - Leading Property Group in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371)  We are also seeking top-calibre candidates for the following exciting roles: 1) Azure Cloud Infrastructure Architect - Leading Insurance Group 2) Platform and Infrastructure Business Analyst - Leading Financial Institution 3) IT Security Business Analyst - Leading Financial Institution

Responsibilities: Act as the SME to review application architectures in Application, Infrastructure, Cloud Computing, Mobile Technology, and Electronic Trading.  Lead the technology assessment across application security including Session Security, Vulnerability/PenTesting items, and Input Validation.  Review applications including Authentication, Authorization, and Auditing.  Review security reference architecture and security blueprints.  Develop and maintain security architecture artifacts.  Act as a Security SME and review implementation design to the application and Infrastructure team, where it will meet the industry security standards. Conduct Technical risk assessments to capture security exceptions and design associated compensating controls based on the assessment results.    Define and maintain the infrastructure and application security framework and provide security assessments.  Requirements:  At least 10 years of experience in the IT Application Security space.  Ability to articulate security principles and security risks to non-technical business stakeholders Security Certificates in CISSP, CISM or equivalent. Knowledge of the common application layer vulnerabilities (eg. OWASP 10), ability to explain these risks, and recommend countermeasures to mitigate these risks. Extensive knowledge of application, network, and platform security vulnerabilities. Ability to explain these vulnerabilities to developers.  Ability to review the code of enterprise applications and identify possible security vulnerabilities. Experience in conducting Information Security, IT Security, and Audit assessments. Presenting the outcomes of the evaluation and obtaining buy-in. Strong focus on reviewing technical designs and functional requirements to identify areas of Security weakness. Working experience in security areas including Authentication (SAML, SiteMinder, Kerberos, OpenID), Data Protection, App Security, and Cryptography.  Excellent communication skills in English, this role will work with regional counterparts.  Bachelor's Degree in Computer Science or related field from a reputable University. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Danny Kwan at [email protected] and put Security Architect - Leading Financial Institution in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371) We are also seeking top-calibre candidates for the following exciting roles: 1) C#. NET API Messaging DevOps Associate - Leading Investment Bank  2) Mobile Tech Business Analyst - Private Wealth Management 3) Rust Trading Systems Engineer - Crypto Start-Up

Responsibilities: Conduct risk assessments and vulnerability scans on the application portfolio to identify any potential security risks. Collaborate with cross-functional IT teams to remediate identified vulnerabilities and ensure the overall security of our applications. Define and implement application security controls and guidelines in line with industry best practices and regulatory requirements. Conduct regular security reviews and audits of our application portfolio to ensure compliance with security policies and standards. Monitor and respond to security incidents, including investigating, analyzing, and reporting any potential threats or breaches. Stay up-to-date with the latest IT security trends, industry standards, and regulatory requirements to proactively address emerging threats and risks. Provide guidance and support to development teams on secure coding practices and application security testing. Collaborate with other IT teams to develop and maintain secure application architectures and deployment practices. Assist in the development and maintenance of IT risk management frameworks, policies, and procedures. Work closely with internal and external auditors to provide necessary information and ensure compliance with audit requirements. Qualifications and Skills: Bachelor's degree in Information Technology, Computer Science, or a related field. Minimum of 8 years of experience in IT risk management, application security, or related roles in a financial institution or similar industry. Strong understanding of IT risk management principles, application security best practices, and regulatory requirements (e.g., NIST Cybersecurity Framework, ITIL, CMMI, ITSM, COBIT, and PMBOK) Experience with application security assessment tools and frameworks (e.g., OWASP, Fortify, Burp Suite). Knowledge of secure coding practices, security testing methodologies, and common application vulnerabilities. Familiarity with financial services industry regulations and compliance requirements. Professional certifications such as CISSP, CISA, CISM, or equivalent are highly desirable. Excellent analytical and problem-solving skills, with the ability to identify and mitigate potential security risks. Strong communication in English and Chinese (Cantonese / Mandarin) and interpersonal skills, with the ability to collaborate effectively with cross-functional teams. Ability to work independently, prioritize tasks, and manage multiple projects simultaneously. Proven ability to adapt to a fast-paced and changing environment. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Danny Kwan at [email protected] and put IT Risk and Security Associate (Application) - Leading Financial Institution in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371)  We are also seeking top-calibre candidates for the following exciting roles: 1) Python Developer - Leading Asset Management Firm 2) Security Architect - Leading Investment Bank 3) IT Support Engineer - Top Investment Bank

Responsibilities: Act as the SME to review the security architecture in Application, Infrastructure, Cloud Computing, and banking/trading applications.  Lead the technology assessment and security controls reviews, including scope, roadmap, and testing plans for key cybersecurity controls. Working with different teams across the bank for project security assessments: both high- and low-level architecture designs, and providing recommendations to mitigate identified risks and ensure compliance with relevant regulatory requirements, etc. Review applications including Authentication, Authorization, and Auditing.  Review security reference architecture and security blueprints.  Third-party risk assessments, regulatory reviews, as well as participating in regional and global governance meetings and committees when required. Requirements:  At least 10 years of experience in the IT Application Security space.  Ability to articulate security principles and security risks to non-technical business stakeholders Security Certificates in CISSP, CISM, or equivalent. Knowledge of the common application layer vulnerabilities (eg. OWASP 10), ability to explain these risks, and recommend countermeasures to mitigate these risks. Extensive knowledge of application, network, platform security vulnerabilities, and security hardening standards (eg. NIST).  Ability to explain these vulnerabilities to developers.  Ability to review the code of enterprise applications and identify possible security vulnerabilities. Experience in conducting Information Security, IT Security, and Audit assessments. Presenting the outcomes of the evaluation and obtaining buy-in. Strong focus on reviewing technical designs and functional requirements to identify areas of Security weakness. Excellent communication skills in English, this role will work with senior peers and stakeholders across the region.  Bachelor's degree in Computer Science, Engineering (or related) from a reputable University. If this outstanding opportunity sounds like your next career move, please send your resume in Word format to Leslie Ho at [email protected] and put Security Architect - Leading Investment Bank in the subject header. Data provided is for recruitment purposes only.                      _________________________________________________________ Headquartered in Hong Kong, Pinpoint Asia is the go-to Specialist Firm for Technology Recruitment We are a team of specialist tech recruiters (many of our recruiters come from an IT background) and we serve a wide range of clients, all the way from tech startups (especially FinTech) to some of the top Financial Institutions on Wall Street and several other large scale enterprises in other industries. Our significant market reputation and status as the leading search firm for many of our clients is a direct result of our strong industry relationships, intimate understanding of the marketplace and proven ability to deliver results.  Our vision is to help companies hire smarter and help job seekers get closer to their career aspirations. To see all our open jobs please reach out to us at https://pinpointasia.com/job-search/ (EA License #72371) We are also seeking top-calibre candidates for the following exciting roles: 1) Lead DevOps Engineer - Global Financial Institution 2) Project Manager, Cloud/Infrastructure Delivery 3) Senior Manager, Infrastructure (Server Platform)