IT Operations & Security Engineer

We are seeking a mid-level technical professional with a solid foundation in IT operations and hands-on cyber security experience. As a core member of the group's IT team, this role will handle escalated IT support (Help Desk) and basic system/network maintenance. More importantly, this role will be independently responsible for daily security monitoring, drafting security manuals, and maintaining/executing BCP/DR plans for our three financial brokerage entities (HK, SG, US), ensuring daily IT operations comply with foundational financial security and regulatory standards.

Key Responsibilities

1.IT Operations & Escalated Support (Help Desk & Operations):

• Resolve escalated IT issues, including complex desktop troubleshooting, network connectivity issues, and in-depth troubleshooting of office software.

• Independently manage enterprise IT infrastructure, including Active Directory (AD), Office 365 tenant administration, Mobile Device Management (MDM), and basic server maintenance.

2.Cyber Security & Daily Monitoring (Cyber Security & Monitoring):

• Independently draft, update, and maintain the group’s cyber security manuals, IT operational procedures, and user security guidelines.

• Conduct daily security monitoring, including reviewing firewall logs, managing antivirus/EDR consoles, triaging security alerts, and executing regular vulnerability scans and patch management.

• Act as the first responder for security incidents, handling medium-complexity events (e.g., phishing email analysis, malware isolation) and drafting incident reports.

3.Business Continuity & Disaster Recovery (BCP & DR):

• Responsible for writing and updating BCP and DR plan documentation for core business systems.

• Independently plan, coordinate, and lead regular backup restoration tests and DR drills, evaluate the results, and report improvement recommendations to management.

• Basic Network & Compliance Management:

• Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.

• Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.

4.Basic Network & Compliance Management:

• Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security.

• Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field required. Over 5 years of combined experience in IT operations and cyber security.

• Fluent in both English and Mandarin.

• Proficient in Windows/Mac desktop support. Solid networking foundation, capable of independently configuring and managing enterprise firewalls (e.g., Fortinet, Palo Alto, Cisco), switches, and routers.

• Familiar with the operation of mainstream security tools, such as Antivirus/EDR, vulnerability scanners (e.g., Nessus, OpenVAS), and basic SIEM log analysis.Understand common cyberattack vectors.

• Familiar with the basic requirements of ISO 27001, SOC 2, or financial industry IT audits.