Associate, IT Security (IT Application Service and Security)
Summary
IT security associate role at CMU OmniClear, HKMA's central securities depository in Hong Kong: implement and maintain IT security systems, conduct security risk/vulnerability assessments and penetration testing, handle incident detection and response, and deliver staff cybersecurity training. Cloud security knowledge and blockchain security experience are valued.
The Hong Kong Monetary Authority (HKMA) is charged with the responsibility for maintaining the stability and integrity of the monetary and financial systems of Hong Kong.
CMU OmniClear Limited (CMU OmniClear) is a wholly owned subsidiary of CMU OmniClear Holdings Limited, which is jointly owned by the Exchange Fund (as the majority shareholder) and Hong Kong Exchanges and Clearing Limited (as the minority shareholder). It carries out the operation and business development activities of the Central Moneymarkets Unit (CMU) on behalf of the HKMA. As part of the critical financial market infrastructure in Hong Kong, CMU is a central securities depository (CSD), providing secure and efficient clearing, settlement and custodian services for securities. CMU OmniClear’s vision is to continuously enhance CMU service coverage, expand connectivity with other markets and upgrade the CMU infrastructure to provide market participants with comprehensive and quality services.
We now invite eligible candidates to join our dynamic and inclusive company for the exciting opportunity below:
Associate, IT Security (IT Application Service and Security)
Key Responsibilities
Assist in the implementation, operation and maintenance of IT security-related systems
Safeguard information-system assets through the prevention, detection, investigation and resolution of security incidents
Conduct security risk assessments across IT systems using standardised frameworks
Perform vulnerability assessments and penetration testing; analyse findings and formulate practical recommendations for remediation
Keep abreast of cybersecurity threats and developments in security technologies, practices and applicable regulatory requirements, including those issued by the Government and relevant regulators
Develop and deliver cybersecurity awareness and training programmes for staff
Requirements
University degree in computer science, information technology, cybersecurity or related fields
At least 2 years of relevant experience in a well-established financial organisation or leading financial institution
Possession of a certification in CISP / CISSP / CISA or equivalent is highly desirable
Knowledge of cloud security implementation
Experience in securing blockchain applications in cloud environments is highly desirable
Knowledge of the HKSAR Government’s IT security policy and guidelines, and regulatory requirements such as C-RAF
Understanding of cyber defence, incident response, common attack vectors, adversary tactics, techniques & procedures, and the MITRE ATT&CK framework
Ability to do research and analyse thoroughly and resourcefully
Self-driven and a good team player
Good analytical, interpersonal and communication skills
Candidates with supplementary experience and qualifications will also be considered, even if they do not meet all of the specified requirements above
Conditions of service
Appointment will be offered by CMU OmniClear
A competitive remuneration package will be offered. There is flexibility to take account of additional experience and qualifications
Fringe benefits include medical and dental benefits and paid annual leave
How to apply:
You may submit an application via one of the following channels:
Online application
By Mail
Send in the hard copy application form (available either at the HKMA’s reception counter or website https://www.hkma.gov.hk) to:
Recruitment Officer
Hong Kong Monetary Authority
55/F., Two International Finance Centre
8 Finance Street, Central, Hong Kong
Copies of transcripts together with a full resumé including details of past experience should be attached to the application. Please mark your correspondence address and the position applied for on the envelope.
Completed application should reach the HKMA, via the designated submission channel, by 21 November 2026. Applicants may wish to submit their applications in advance of the deadline to allow for any unexpected delays, e.g. with internet traffic, including file size restrictions and system maintenance downtime. Those not contacted by CMU OmniClear within three months from the closing date for applications should consider their applications filed for future reference.
CMU OmniClear is an equal opportunities employer and welcomes application from all qualified candidates. All information provided will be handled strictly in accordance with our personal data policy, a copy of which will be provided upon request. You may contact the Recruitment Officer at the above address.
The Online Application System is scheduled to perform regular system maintenance from Hong Kong time 6:00 a.m. to 8:00 a.m. every Wednesday. During this time, online application will not be available.
Learn more about the business of CMU OmniClear: www.CMUOmniClear.com.