Application Security Associate Director - DevSecOps | Finance, HKD 1M - 1.5M | 人才服務辦公室

職位描述

Responsibilities:

• oversee Application Security
• Assess and evaluate information security products and solutions.
• Advise and assess security controls for critical applications and IT infrastructure services.
• Facilitate the deployment of strategic information security solutions to address cyber threats and information security risks.
• Ensure cybersecurity resilience to proactively prevent business disruptions or service outages.
• Reduce risk exposure, improve efficiency, and maintain a balance of data protection.
• Communications and Engagement with Key Stakeholders to promote the importance of compliance with Company standards and drive thought leadership in this evolving paradigm.
• Communicate with group offices, business partners, corporate clients, IT vendors, and external parties on IT security matters, as required.

Job Requirements:

• Bachelor's degree in Computer Science, Information Systems, Engineering, Risk Management, or a related discipline.
• Minimum of 10 years of experience in project management, product support, and vendor management.
• Knowledgeable about cloud industry trends, driving thought leadership, and understanding security challenges associated with the cloud.
• Proven knowledge of authentication solutions such as Multi-factor Authentication (MFA), OAuth2, SAML, and encryption solutions.
• In-depth knowledge of hardening Internet-facing applications with highly confidential information.
• Hands-on experience with various security tools.
• Strong understanding and practical use of DevSecOps.
• Experience in developing cloud-native applications (AWS, Azure) is an advantage.
• Experience in production support is an advantage.
• Relevant audit professional qualifications and/or IT security certificates preferred (such as CISA, CISM, CISSP, etc.).
• Excellent written and oral communication skills, with a demonstrable ability to facilitate cross-functional teams effectively.
• Ability to solve complex problems while effectively communicating technical concepts.
• Quick learner with the ability to adapt to new technologies rapidly.
• Confident, credible, and capable of earning the respect and trust of others.
• Independent and self-initiative, with strong analytical and creative problem-solving skills.