Our Client:
A leading Hong Kong-based financial services group, delivering comprehensive banking, wealth management, and investment services across Greater China and worldwide.
Job Description:
Lead the security architecture and construction of cloud infrastructure, covering landing zone design, network security, access control, and intrusion detection — spanning Cloud Security, Network Security, Endpoint Security, Firewall, WAF, NDR/XDR, and related domains.
Define and own the enterprise security architecture and access control standards, driving the design, adoption, and continuous improvement of robust security solutions across the organization.
Lead security operations from a network and cloud security perspective, driving operational maturity, efficiency, and measurable improvement in the security posture.
Conduct regular security risk assessments and control reviews (from a first-line perspective), analyze systemic weaknesses, and propose and track remediation and improvement strategies.
Contribute to — and where appropriate lead — the development and implementation of cloud, network, and security strategies, policies, and governance frameworks.
Provide technical leadership and mentorship to security team members, and act as a key escalation point for complex security issues.
Collaborate with cross-functional stakeholders (infrastructure, application, compliance, and business teams) to embed security requirements into projects and day-to-day operations.
Job Requirements:
Degree holder in Electronic Engineering, Information Technology, or a related discipline.
Minimum 5–8 years’ relevant experience in security management, security architecture, and/or SIEM, including prior team leadership or project ownership experience.
Familiarity with common cloud services and security systems — such as AWS/Huawei Cloud, Kubernetes, WAF, Cloudflare, Akamai, HillStone, and Palo Alto products — is a strong plus.
Proficiency in understanding and addressing common Web and system security vulnerabilities, with the ability to drive remediation at scale.
Self-motivated, customer-oriented, and able to work under pressure, with strong stakeholder management and communication skills.
Industry certifications such as CISA, CISSP, or CCSP are advantageous.
Familiarity with security standards such as ISO 27001, PCI DSS, and NIST, and experience driving compliance and audit readiness.
Proficiency in spoken and written Chinese and English.