Manager (Cyber Resilience)

Hong Kong Interbank Clearing Limited

Hong Kong Interbank Clearing Limited (hereinafter referred to as “the Company”) is a private organization jointly owned by the Hong Kong Monetary Authority (HKMA) and The Hong Kong Association of Banks. The Company’s key objective is to develop and operate a safe and efficient multi-currency and multi-dimensional financial infrastructure in Hong Kong for:

• large-value interbank fund transfers denominated in HKD, USD, Euro and RMB;

• interbank money settlement of equity and debt securities transactions in Hong Kong via the linkages with the Hong Kong Securities Clearing Company Limited and the HKMA’s Central Moneymarkets Unit (CMU) system;

• small-value interbank fund transfers denominated in HKD and RMB via the HKD and RMB Faster Payment System; and

• interbank clearing and/or money settlement of paper cheques and various types of electronic payments in Hong Kong.

The Company is also the operator of the HKMA’s CMU system.

Apart from interbank clearing-and-settlement services, the Company and its subsidiaries also support the HKMA and the financial industry to foster the development of the financial technology (“FinTech”) ecosystem in Hong Kong.

We are looking for a suitable candidate to take up the following job position.

Manager (Cyber Resilience)

Major Responsibilities

• Manage the company’s cyber security posture

• Coordinate and develop cyber resilience strategy for the company, provide interpretation of cyber resilience controls and regulatory requirements, and recommend industry practices in implementation

• Establish and maintain a cyber threat intelligence program on cyber threat collection, analysis and dissemination processes

• Lead and conduct cyber resilience related assessments and projects for the company

• Initiate and develop mitigation actions for any identified improvement areas or adverse trends

• Provide cyber security advisory services on architectural design for IT projects

• Manage the Security Operations Center (SOC)

• Coordinate with relevant departments on cyber security related incidents and maintain the related procedures

• Provide input to the company’s risk metrics reporting

• Coordination with relevant parties for preparing cyber security budget

• Liaise with internal and external auditors in performing cyber resilience assessment and intelligence-led cyber attack simulation testing (iCAST)

• Liaise with regulators on cyber security matters

• Perform any other ad hoc duties or projects as assigned

Requirements

• University degree preferably in information technology, cyber security, computer science or related discipline

• Minimum 6 years of experience in cyber security, technology risk management and/or auditing

• Good understanding of technology risk management and cyber security best practices, with broad knowledge of cyber security products, Fintech, AI, data privacy and/or industry practices

• Familiar with ISO27001, CSA STAR, and HKMA CFI 2.0 framework, technology risk management, cyber threat intelligence and cyber security related guidelines.

• Experience on coordination of cyber security related incidents is an advantage

• CISA, CISM, CDPSE, CRISC, CISSP, CEH, CCSP, GPEN, CPENT, PNPT, OSCP, GCTI, AAIR, AAISM, AAIA, and/or other cyber resilience related certifications preferred

• Team player with strong interpersonal and communication skills

• Excellent problem solving and analytical skills

• Good command of written and spoken English and Chinese

How to Apply

Interested parties please send your curriculum vitae stating your current and expected salaries, and contact phone number to the Human Resources Division, Unit B, 25/F, MG Tower, 133 Hoi Bun Road, Kwun Tong, Kowloon or by clicking the "Apply Now" button below:

All applications and personal information collected will be treated in strict confidence and only be used for the purpose of recruitment and selection. The information collected will be accessed by our authorized personnel only. Those applicants not contacted by the Human Resources Division within two months from their application date should consider their applications filed for future reference which will be retained for one year for possible future job matching, and destroyed after the expiry of one year.