Total 5 information security analyst job vacancies in Tsim Sha Tsui, Hong Kong

Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all." Job Summary: The Markets Systems Technology team is responsible for delivering first-in-class systems for trading, market data dissemination and surveillance monitoring in cash and derivatives markets. We play a critical role in managing the full software development cycle, including architecture design, development, testing and implementation of our mission critical systems. We also partner with infrastructure and cyber security team to operate our systems in such fast growing financial markets in Hong Kong. Job Duties: We are seeking for a motivated and energetic Software Engineer to join our Markets Systems technology team. You will have the opportunity to work with a group of talented and passionate software engineers whom shared the vision of enhancing the current HKEX systems whilst working towards the development of the next generation of HKEX platforms. If you want to make an impact, come and join us. Responsibilities: Responsible for system development and project implementation activities including the business requirement analysis, resource estimation, schedule development, application development, testing and documentation for cash market systems. Collaborate with business user divisions to collect business requirements Collaborate with other IT teams on activities with common systems impacts Carry out production support and BAU task Perform quality review for software design and carry out required code changes in application development Conduct and support the testing in various phases of software development process Assess technological risk and drive actions for mitigation Establish technical excellence and follow industry best practices Uphold compliance with organization policies and standards Requirements : Degree in Computer Science, MIS, IT or related disciplines Minimum 10 years' relevant experience within similar industry or sizeable organizations. Solid skills in Linux, C/C++, Python, unicast and multicast network programming, shell scripting etc. With strong object oriented programming skills but less experience in C/C++ will also be considered. Good understanding and experience in DevOps framework and tools (eg. Jira, Git, Jenkins etc.) Experienced in project for development of large scale mission critical market systems Good understanding of securities and/or derivatives industry. Knowledge of FIX protocol is an added advantage Experience in securities trading system is an added advantage Strong analytical, interpersonal, communication skills. Good analytic mind, self-motivated and able to work independently Good command of written and spoken English and Chinese ( Mandarin is an added advantage). HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace. Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Permanent

Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all." Job Summary: The Information Security Team consists of Security Strategy and Solution Architecture team, Security engineering and Operations team, Threat Management team as well as Security Governance business. Job Duties: The Security Solution Architect is accountable for IT security architecture, design and solution engineering, meeting agreed requirements aligned to the Information Security and business strategy. Reporting to Principal Security Architect, the incumbent will work collaboratively with Enterprise Architecture, Enterprise Security Architects, Security Engineering, Security Services Operations, Security Operations Centre team and Project Delivery team. This role will translate the group-wide information security strategy, policy and control requirements into secure solutions. This role need to balance between unique business objectives of a global exchange against the inherent security threat and risk profile applicable to critical national infrastructure. Also helps reviewing and providing security requirement inputs or security integration architecture for business led projects. Responsibilities Responsibility for ensuring the agreed information and cyber security architecture and solution designs are engineered to specification and within acceptable risk tolerance. Work with Security Services and Security Engineering subject matter experts to ensure that security services/systems are architected with engineering and operational requirements built in. Work within governance forums such as Enterprise Architecture Board, HKEX Group Security Architecture Committee and Group Security Architecture Working Group. Design and develop security solutions in accordance with the HKEX System Development Lifecycle, Application and application code security architecture and documentation standards. Create and review functional and non-functional security requirements, including all additional requirements for InfoSec and Cyber projects. Review system architecture and designs to ensure all solutions have undergone appropriate assurance and meet security acceptance criteria. Develop and present reference patterns for security architecture and technical security standards to meet Information Security Policy Contribute to the security technology strategy, security architecture roadmap, maturity model, policies and standards. Support day-to-day activities of the Information Security Strategy and Solution Architecture function ensuring Operating Level Agreements are met. Requirements University degree in Computer Science, Information Management, or related fields Relevant experience with information security and enterprise architecture methods and frameworks (e.g., SABSA, TOGAF, NIST CSF) Cyber Security certifications, such as SABSA, CCSP (Certified Cloud Security Professional), CISSP (Certified Information Systems Security Professional) or security specific cloud certifications such as AWS, Azure, GCP, AliBaba Cloud, Kubernetes, etc. Relevant experience of software and system assurance methodologies and associated vulnerability management and risk management practices. Relevant experience with industry best-practice approaches to the design, implementation, operations, and management of IT systems (e.g., Agile, Waterfall, ITIL, COBIT). Up-to-date experience of delivering solutions security in public and/or private cloud. Experience of developing/ contributing to security policies and standards. Current experience securing automated build and deployment pipelines and securing artefacts An intelligent, articulate, consensus building and persuasive leader. Must have a strong business acumen and technology knowledge, who can serve as an effective member as part the IT management team. Must be able to communicate information security-related concepts to a broad range of technical and non-technical audiences. Experience of effective stakeholder management and senior level reporting. Able to work effectively in a matrix management environment. Able to deliver within a fast-moving high-pressure environment, balancing multiple work streams and deliverables. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace. Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Permanent

Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all." Job Summary: The Listing Systems comprises of three sub teams; the External Systems team, Internal Systems team and the Data & Common Services team. They are responsible for the design and implementation of all of our applications systems for our Listing Division. Job Duties: The role is to develop and support all the web applications for our Listing Divisions. You will have the opportunity to work with a group of talented technologists in delivering large scale, critical projects in a dynamic environment and a challenging timescale. Responsibilities: IT project implementation, application development and maintenance activities for all the Listing systems. Analyze and document detailed requirements, experience various project management methods. Develop and support of web applications systems. Manage and participate in activities of whole Software Development Lifecycle phases, from requirement analysis, design, system development, testing and deployment to support Liaise with other IT specialist teams, end users and external vendors on various critical project deliveries. Requirements: Degree in Computer Science, MIS, IT or related disciplines Minimum 5 years' IT work experience in application development and support of critical business application systems • Work experience on web application system on Linux platform and Oracle database Application development using Java, Spring framework, Javascript framework and PL/SQL Proficiency in SDLC methodology (Agile and Waterfall) and documentation Job knowledge and good understanding of web security, micro-service architecture design Familiar with Git, Jenkins, SonarQube, Eclipse is a plus Working experience on cloud application development and Windows (.NET environment) is an advantage Strong analytical, communication, problem solving and managerial skills Good command of written and spoken English and Chinese HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace. Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Contract

Company Introduction: We're home to Asia's most dynamic and vibrant capital markets. Connecting capital, ideas, inspiration and innovation for deeper, more diverse and liquid global capital markets; providing greater choice and opportunity for our customers, each and every day. HKEX is a purpose-driven company. Our commitment to the long-term development of our business and our markets is articulated in our purpose: "To Connect, Promote and Progress our Markets and the Communities they support for the prosperity of all." Job Summary: Primary Market Information Team is part of the Depository & Nominee Services under Clearing & Depository of the Operations Division. The team is responsible for managing the operations of regulatory filing services for issuer disclosure filings, processing corporate actions data from listed issuers and administering trading arrangements stemming from issuers' corporate actions. Job Duties: Responsibilities: Support regulatory filing services to enable listed issuers to publish disclosure documents Assist in processing corporate actions data from listed issuers Support project execution in compiling user requirements, planning and executing user acceptance test, and rollout Provide operational support such as strategic reporting and database management Undertake other ad hoc tasks as assigned by supervisor Requirements: University degree in Business Administration, Finance or related disciplines At least 3 years of working experience in financial industry Meticulous, attentive to details and able to maintain high level of accuracy Good interpersonal and communication skills Good command of written and spoken English and Chinese. Proficiency in Putonghua is essential Shift duties required HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace. Location: HKEX - Exchange Square Shift: Irregular Shift (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Permanent

Location: HKEX - TKO Shift: Standard - 40 Hours (Hong Kong SAR) Scheduled Weekly Hours: 40 Worker Type: Contract Job Summary: The Information Security Engineer is responsible for designing, building and maintaining enterprise IT security solutions to address the organization's security requirements. Reporting to the Information Security Services Lead, this role will work closely with IT Innovation Lab, software engineering teams, IT infrastructure team, IT compliance, security operations and cyber technology risk team. You play a key role in protecting the organization. Job Duties: Responsibilities: Engineer, implement and monitor security measures for the protection of computer systems, networks and information Identify and define system security requirements Design computer security architecture and develop detailed cyber security designs Configure and troubleshoot security systems and infrastructure devices Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks Maintain all solution design documentation, processes, procedures and report on metrics to demonstrate effective and efficient management of services, especially SIEM Delivery security service on-boarding such as connecting systems to SIEM Review IT systems to ensure that they have met security acceptance criteria. Work with product vendors and suppliers to maintain and enhance existing security tooling and products Ensure that the organization security tools can detect and help with the response to cyber security incidents. Document and validate disaster recovery testing for CyberSecurity tools. Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancements Support in managing the Total Cost of Ownership (TCO) for security solutions which includes new investments and business-as-usual financials. Design and execute processes to make BAU changes to security tools Automate or script changes and validation processes Requirements: Proven work experience as a System Security Engineer or Information Security Engineer Experience in building, maintaining and operating security systems and platforms Hands on experience in a number of security systems, including log management, content filtering, SOC tools, threat detection etc Experience with network security and networking technologies and with system, security, and network monitoring tools Thorough understanding of the latest security principles, techniques, and protocols (such as zero trust, etc) Problem solving skills and ability to work under pressure Must have strong information security technology knowledge/concepts and can effectively communicate with senior management and a broad range of technical/non-technical audiences. Strong written communication skills and verbal presentations to senior management. Must have a relevant University degree in Computer Science, Information Management, or related field, or equivalent experience. Good presentation, project planning and documentation skills Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols Familiarity with application, database and operating system security Familiarity with cloud security technologies (AWS or Azure is preferred) Familiarity with risk / control frameworks, such as Mitre ATT&CK, D3FEND, OWASP, NIST Cybersecurity Framework Familiarity in scripting or automation is an added advantage Familiarity with Identity and Lifecycle management is an advantage Previous experience in regulated environments is an added advantage Company Introduction: Hong Kong Exchanges and Clearing Limited (HKEX) is one of the world's major exchange groups, and operates a range of equity, commodity, fixed income and currency markets. HKEX is the world's leading IPO market and as Hong Kong's only securities and derivatives exchange and sole operator of its clearing houses, it is uniquely placed to offer regional and international investors access to Asia's most vibrant markets. As the global markets leader in the Asian time-zone, we offer a world of opportunities for early careers and experienced hires. Here, we know that diverse thinking fosters better solutions, and we are committed to building an open and dynamic environment which allows our business to innovate and our people to thrive. Discover the latest career opportunities and programmes at HKEX. HKEX is committed as an Equal Opportunity Employer. Diversity is one of our core values and we look to support, respect diverse perspectives, abilities, culture and experiences within our workplace.