A global Investment Bank is looking for someone with a background in Application Security Risk to join their expanding team in HK / TKY.

Responsibilities:
– Participate on security related development/infrastructure projects to improve application security; Respond to critical alerts or new vulnerabilities during the Asia time zone
– Ensure that application/IT related risks are appropriately communicated and mitigated
– Advise business & technology users on technology risk policies/standards to ensure that the security principles are understood; Ensure that security solutions are adopted by the users
– Perform risk assessments to identify gaps in compliance to information security & BCP standards and policies (in-house and external technology platforms)
– Work closely with senior key stakeholders to report high-priority risk issues and recommend strategies to mitigate them
– Maintain a thorough understanding of regulatory requirements in order to conduct internal self-assessments and gap analysis and ensure compliance
– Participate in global and local risk/security initiatives
– Promote awareness of information security and business continuity within the region

Required Skills:
– 6-10+ years of technology security experience (especially in application/development security)
– Must have strong technical knowledge in relation to security including application design/architecture, development (Java, C#, or C++), access control, privilege management, database, including vulnerability assessment / penetration testing
– Strong project management and leadership skills
– Strong understanding business continuity, regulatory requirements and or technology control requirements across the Asia markets is a plus
– Infrastructure security knowledge including servers (Win, Linux/Unix), network, firewall, connectivity, storage, etc. is a strong plus
– Ability to work effectively as part of the regional and global team supporting a wide technology community
– Previously finance experience is preferred but not required
– Fluency in written and spoken English; Other Asian languages are beneficial
– Familiarity with Risk Analysis and Risk Management methodologies is preferred
– Formal Information Security certifications preferred