• Develop and implement IT security control reviews and settings for banking systems to ensure appropriate controls are in place and in adherence to IT security policy and standards
• Evaluate, identify and mitigate new IT security threats, and enhance the bank's IT security initiatives
• Manage the implementation of IT security policies in IT infrastructure and systems, and assist in preparing information security audit
• Review the security tasks in related to IT audit
• Degree Holder in IT or related disciplines or equivalent qualifications at HKQF level 5, with minimum 8 years’ working experience on system and/or network configuration
• Holder of CISSP / CISM / CRISC / CISA certification with CCNP / CCDP is preferred
• Hands-on experience in vulnerability scanning, patch and PID management is an asset
• Strong understanding of Information Technology Risk Management and information security practices
• Solid knowledge in firewall, router, switch, anti-spam, intrusion prevention / detection, VPN, Privilege ID and access control systems, Microsoft Windows and Linux system
• ECF achievement on Cybersecurity is the definite advantage

Candidate with less experience will be considered as Deputy Information Security Manager

We offer attractive remuneration package to the right candidates. Please send your full resume with expected salary to The Human Resources Manager, Bank of Communications Co., Ltd., 10/F, Bank of Communications Tower, 231-235 Gloucester Road, Wan Chai, Hong Kong, or fax to 2838 9209, or
by clicking the 'Apply' button.

"Data held by the Bank relating to employment applications will be kept confidential and used only for consideration of applications. The bank may also refer suitable applicants to other vacancies within the Group. All personal data of unsuccessful applicants will be destroyed after the recruitment exercise. A copy of Personal Information Collection Statement is available upon request."