Job Description

:
Information security risk monitor and mitigation, including:
Regularly notifying the bank of critical security information if needed.
Conducting periodic vulnerability scans and assisting in corresponding hardening.
Maintaining the SIEM system and performing log correlation and analysis on a regular basis.
Analyzing security alerts generated by a variety of security systems in a real-time manner, and responding the Security Incident as needed.
Periodically reviewing security logs generated by such security products as NIPS and NIDS upon the bank's regulations.
Analyzing penetration test results before proposing and implementing remedial solutions.
Reviewing the configurations of AIX servers, network devices, and firewalls regularly upon the bank's security requirements.
Annually performing Risk Assessment in accordance with NIST SP800-39 and ISO27005.
Executing security system routine inspection daily.
IS Infrastructure Maintenance and Backup
Assisting in Vendor Cybersecurity Risk Assessment annually.
Providing security awareness training to the bank staff when needed.
Providing security reports periodically.
Backup the security administrator role.
Requirements
Three (3) to four (4) years' experience with Information Security Management System (ISO27001)
Three (3) to four (4) years' experience with multiple security systems, including but are not limited to Firewall, IDS/IPS, antivirus, antivirus, Anti-SPAM, SIEM, DLP, Sandbox, Encryption Endpoint as well as Web Security Gateway.
Three (3) to four (4) years' experience with Penetration Test, Vulnerability Scan, Configuration Review and Risk Assessment.
Experience with Information Security Monitoring and Incident Response
Experience with Network Maintenance
Experience with PC servers and Unix platform administration and maintenance
Experience with such various databases as MS SQL Server, Oracle, and MySQL
Experience with Application Development (mastering one or two coding languages such as C/Java/Python/Perl/Powershell).
Chinese Language proficiency skills preferred,but not mandatory.

Skills Required