Key Accountabilities

Assist the Team Lead / Senior Manager in the following duties:

Executing and refining the monitoring framework and mechanism in respect of technology risks and information security management for managing the eMPF platform (the Platform) which is developed, administered and operated by a third party delivery partner (the “Delivery Partner”);
Ensuring policies and procedures are properly enforced and monitored in actual practice to achieve relevant governance goals;
Working closely with the Delivery Partner to review deliverables submitted by the Delivery Partner;
Providing oversight on technology risk and information security related work by the Delivery Partner to develop and refine risk indicators, risk controls assessments, risk register and implementation of rectification;
Overseeing the Delivery Partner’s operations and management of technology risk management and information security related initiatives;
Leading and driving the security risk assessments, red team security tests, and compliance assessments on information security and technology risk; and
For issues handling, collaborating with the Delivery Partner, Risk Management Team, Digital & IT Team, and other relevant teams on root cause analysis as well as review and monitoring of remediations implementation.

Skills and Qualification

Degree holder in Computer Science / Information Security or related disciplines;
Minimum 8 years of relevant experience in technology risk, information security, cyber security in a financial services and/or public sector environment;
Relevant security management qualifications, e.g. CISM, CISSP, CISA, CRISC or equivalent;
Good knowledge in information security and technology risk management principles and best practices;
Hands-on experience in configuring security devices, SIEM monitoring, penetration test, red team security test, risk controls implementation is preferred;
Knowledge of PDPO, ISO 27001 as well as infrastructure and applications;
Vendor management experience for large-scale projects;
Responsible, good problem solving, communication skills, and a good team player;
Can deliver work timely; and
Good command of both spoken and written Chinese and English.

Remuneration Package

Rank and salary will be commensurate with qualification and experience. The initial appointment will be made on a fixed-term contract. A competitive remuneration and benefits package including discretionary performance-linked variable pay, annual leave, medical, dental and life insurance coverage, and MPF will be offered.

To Apply

Interested candidates are invited to apply by clicking the “Apply Now” button. Review of the applications will start as soon as possible and continued until the posts are filled. Applicants not contacted for follow up within 3 months after the closing date for application may assume that their applications unsuccessful. Applications not selected for further processing may be considered for relevant openings in the future but their applications will not be retained for more than a period of two years after the closing date.

The information provided will be kept confidential and only be used for those purposes relating to your application. Please visit our website for the details of the MPFA’s Personal Information Collection Statement at https://www.mpfa.org.hk/en/mpfa/joining-mpfa/job-vacancies/personal-information-collection-statement. The MPFA and its subsidiary are equal opportunities employers and welcome applications from all qualified candidates.

eMPF Platform Company Limited

Latest Jobs

Manager (Risk Management) - Technology Risk Management and Information Security

Manager (Risk Management)