Cyber Security Operations Professional

Main Responsibilities

• Security Operations: Conducts technical monitoring of internal/external cyber-attacks, data leaks, endpoint threats, and external frauds. Responsible for the maintenance and optimization of security products/tools and devices, and the development of security operation management systems. Security Incident Response: Responsible for emergency response to cybersecurity incidents, including attack analysis, forensics and investigation, and reporting. Organizes and participates in cyber incidents drills. Vulnerability & Threat Intelligence Management: Manages the full lifecycle of IT infrastructure and application vulnerabilities. Responsible for the collection, analysis, and management of threat intelligence, integrating with asset data for rapid threat warning. Security Technical Support & Implementation: Responsible for security configuration and checks during information system deployment. Participates in research and testing of new security technologies and products. Provides guidance to institutions such as Macao, Taiwan, Japan, South Korea, and Vietnam on enhancing their cybersecurity operation management systems, including solution implementation, vulnerability detection, and security monitoring. Responsible to support and provide guidance on cybersecurity incident response and for cybersecurity incidents occurring at overseas institutions. May be dispatched on-site for support if required. Performs other cybersecurity operation duties as assigned.

Requirements

• Degree holder in Cyber Security, Computer Science, Information Technology, or a related discipline. Minimum 5 years of experience in cybersecurity operations, security monitoring, incident response, or related fields. Experience in the financial industry is preferred. Solid technical foundation in security operations, familiar with tools such as SIEM, threat intelligence platforms, compliance and vulnerability scanners, endpoint security, network security, host security, threat intelligence platforms, etc. Familiar with cybersecurity incident response frameworks and the vulnerability management lifecycle. Excellent cross-team communication and crisis management skills, with the ability to work under pressure. Professional certifications such as CISSP, CEH, GCIH, Security+ are preferred. Good command of written and spoken Mandarin is a must. Experience in cross-border collaboration, remote or on-site technical support is a significant advantage. To apply, please submit your application along with your resume to recruithk@asia.ccb.com. Applicants who are not contacted within 8 weeks may consider their applications unsuccessful and their personal data will be retained by the bank for a period up to two years. All information provided by applicants will be used for recruitment purposes only and will be used strictly in accordance with the bank’s personal data policies, a copy of which will be provided upon request.