Analyst (Information Security) (Two-year Programme)
Summary
Junior information-security analyst on a two-year talent development programme at Hong Kong's interbank clearing/settlement operator. Day to day: identity & access management, SOC alert triage, threat intel, key/certificate inventory, vulnerability scanning and pentest coordination, plus scripting for security automation.
Hong Kong Interbank Clearing Limited
Hong Kong Interbank Clearing Limited (hereinafter referred to as “the Company”) is a private organization jointly owned by the Hong Kong Monetary Authority (HKMA) and The Hong Kong Association of Banks. The Company’s key objective is to develop and operate a safe and efficient multi-currency and multi-dimensional financial infrastructure in Hong Kong for:
large-value interbank fund transfers denominated in HKD, USD, Euro and RMB;
interbank money settlement of equity and debt securities transactions in Hong Kong via the linkages with the Hong Kong Securities Clearing Company Limited and the HKMA’s Central Moneymarkets Unit (CMU) system;
small-value interbank fund transfers denominated in HKD and RMB via the HKD and RMB Faster Payment System; and
interbank clearing and/or money settlement of paper cheques and various types of electronic payments in Hong Kong.
The Company is also the operator of the HKMA’s CMU system.
Apart from interbank clearing-and-settlement services, the Company and its subsidiaries also support the HKMA and the financial industry to foster the development of the financial technology (“FinTech”) ecosystem in Hong Kong.
We are looking for a suitable candidate to take up the following job position.
Analyst (Information Security) (Two-year Programme)
Major Responsibilities
Assist in user identity and access management, including provisioning, deprovisioning, and lifecycle management for standard and privileged accounts
Assist the security management team in handling alerts from the Security Operations Centre (SOC), including initial alert triage, incident logging, and response coordination under senior guidance
Assist in cyber threat intelligence gathering and analysis, leveraging SOC data to proactively identify emerging threats and strengthen defensive postures
Maintain key and certificate inventory records, track expiration dates, and assist with routine renewals and revocations per security policies
Assist supervisors to run scheduled vulnerability scans using approved tools, document findings, and help track remediation progress with IT and system owners
Support penetration testing initiatives by assisting with scoping documentation, coordinating test environments, and tracking vulnerability remediation
Assist in security reviews for new projects by checking system configurations against baseline standards and helping monitor control implementation
Review open-source software and freeware for known vulnerabilities, licensing compliance, and alignment with organizational security guidelines
Develop automated scripts and tools to enhance security operational efficiency
Perform other job duties as assigned by the supervisors
Requirements
University degree preferably in information technology, information security or related discipline
1 to 2 years of experience in information security or computer operation field preferably with exposure to information security. Fresh graduates are welcome to apply
Holder of security certificates - CISA or other equivalent certificates is an advantage
Experience and knowledge in risk management framework and methodology, public and/or private cloud security is an advantage
Team player with sound interpersonal, communication and presentation skills as well as analytical skills
Good command of written and spoken English and Chinese
Willing to work shift duty (evening shift normally from 12:30 to 21:30 with shift duty allowance)
Our Benefits and Career Path
Attractive remuneration package
Medical and dental insurance
Life insurance
Two-year talent development program incorporating on-the-job training, external training and job rotation
Promotion to Specialist II after satisfactory completion of the two-year programme
How to Apply
Interested parties please send your curriculum vitae stating your current and expected salaries, and contact phone number to the Human Resources Division, Unit B, 25/F, MG Tower, 133 Hoi Bun Road, Kwun Tong, Kowloon or by clicking the "Apply Now" button below:
All applications and personal information collected will be treated in strict confidence and only be used for the purpose of recruitment and selection. The information collected will be accessed by our authorized personnel only. Those applicants not contacted by the Human Resources Division within two months from their application date should consider their applications filed for future reference which will be retained for one year for possible future job matching, and destroyed after the expiry of one year.