IT Operations & Security Engineer
Salary: RM 6,000 – RM 9,000 per month
About the role
We are seeking a mid-level technical professional with a solid foundation in IT operations and hands-on cybersecurity experience. As a core member of the group's IT team, this role will handle escalated IT support (Help Desk) and basic system/network maintenance. More importantly, this role will be independently responsible for daily security monitoring, drafting security manuals, and maintaining/executing BCP/DR plans for our three financial brokerage entities (HK, SG, US), ensuring daily IT operations comply with foundational financial security and regulatory standards.
Key responsibilities
Resolve escalated IT issues, including complex desktop troubleshooting, network connectivity issues, and in-depth troubleshooting of office software
Independently manage enterprise IT infrastructure, including Active Directory (AD), Office 365 tenant administration, Mobile Device Management (MDM), and basic server maintenance
Independently draft, update, and maintain the group's cybersecurity manuals, IT operational procedures, and user security guidelines
Conduct daily security monitoring, including reviewing firewall logs, managing antivirus/EDR consoles, triaging security alerts, and executing regular vulnerability scans and patch management
Act as the first responder for security incidents, handling medium-complexity events (e.g., phishing email analysis, malware isolation) and drafting incident reports
Responsible for writing and updating BCP and DR plan documentation for core business systems
Independently plan, coordinate, and lead regular backup restoration tests and DR drills, evaluate the results, and report improvement recommendations to management
Manage basic network devices (firewalls, routers, switches), responsible for VLAN configuration, ACL policy management, and port security
Understand and implement foundational IT compliance requirements for the financial industry (e.g., HK SFC, MAS), and provide technical evidence and remediation plans for internal/external audits
About you
Bachelor's degree in Computer Science, Information Technology, or a related field
Above 5 years of combined experience in IT operations and cybersecurity
Prior experience in IT support or security operations within the financial industry (securities, futures, banking) is highly preferred
Proficient in Windows/Mac desktop support, with strong skills in Active Directory, Office 365 administration, and basic PowerShell scripting
Solid networking foundation, capable of independently configuring and managing enterprise firewalls (e.g., Fortinet, Palo Alto, Cisco), switches, and routers
Familiar with the operation of mainstream security tools, such as Antivirus/EDR, vulnerability scanners (e.g., Nessus, OpenVAS), and basic SIEM log analysis
Understand common cyberattack vectors (e.g., phishing, ransomware) and their defense and incident response procedures
Fluent in both English and Mandarin (as working languages), with the ability to independently write professional English security policy documents, audit reports, and emails
Strong logical analysis skills and the ability to work under pressure, capable of independently driving projects and resolving unexpected issues in a multi-tasking environment