Company: Societe Generale
Company Address: 28/F, Three Pacific Place, Hong Kong
Company Website: https://www.societegenerale.com/
Company Background:
SG CIB is the Corporate and Investment Banking arm of the Société Générale Group. Present in over 50 countries across Europe, the Americas and Asia.SG CIB provides corporate, financial institutions, investors and public sector clients with value-added integrated financial solutions. Present in over 50 countries across Europe, the Americas and Asia. Societe Generale provides corporate, financial institutions, investors and public sector clients with value-added integrated financial solutions. The Information Technology Department provides and maintains IT solutions to support the business’s growth. The Finance Risk and Market Data team is a regional team with 80 people based in Hong Kong, covering the Asia Pacific region. The team drives the IT solutions for the Finance department across Asia Pacific, covering specifically Accounting and Regulatory Reporting projects across the locations.
Type of Industry: Banking and Finance
Job Title: Infrastructure Security Specialist
Job Type: Graduate Job
Target Students: Final Year
Job Description:
Work closely with SOC, CERT and other security teams and Infrastructure skill teams in daily operation and review security requirements
Exception management: Evaluate and manage infrastructure security exceptions
Vulnerability management: Conduct scan, assessment and remediation follow-up
Incident management: Report and follow security incidents and their remedial actions
Request / Change management: Conduct security assessment for infrastructure request & changes
Review security architecture proposed by other infrastructure teams
Deliver innovation initiative to improve overall infrastructure security and efficiency
Manage and execute the Infrastructure related security projects
Be the security Interface with stakeholders at all levels, from technical engineers to senior management locally, regionally and globally
Work closely with other risk and security departments, including all 3 lines of defence
Cyber reporting: Production of various cyber security reporting (KPIs; KRIs). Coordinate among
Infrastructure teams to contribute to external stakeholders reporting and requests
Conduct security & risk awareness training to the Infrastructure teams
Job Requirements:
Knowledge and hands-on experiences in IT, Infrastructure and information security
Knowledge and experience in IT infrastructure (speak the language, expertise not required)
Knowledge in technology regulatory requirement like HKMA, SFC, MAS, GDPR, CBIRC, etc. is required
Project management experience is desired
Knowledge and experience in a banking environment will be beneficial but not essential
Knowledge in the MITRE ATT&CK framework and hands-on experience on security incident investigation processes & techniques
Security knowledge in the Public Cloud, development and specific Infrastructure domains are a plus
Professional certification recognized by Regulatory bodies like HKMA, e.g. CISM, CISA or CISSP, is mandatory
Behavioral Skills
Client - Understanding and Respect: I listen to clients and colleagues in order to understand and anticipate their needs
Client - Risk: I strive to satisfy clients while taking into account risks for the company
Team Spirit - Synergies: I make cooperation with colleagues in and outside my team a priority
Team Spirit - Collective mindset: I favour the team’s interest over my own results
Responsibility - Courage: I express my convictions and make decisions with courage and respect.
Responsibility - Accountability: I make decisions in my scope of responsibilities
Application Details:
Via the website: https://careers.societegenerale.com/en/job-offers/infrastructure-security-specialist-240006BX-en
Application Deadline: 31 May 2024 (Friday)
Date Exhibited: 8 March 2024
More Jobs from Societe Generale.