Information Security Expert
Hong Kong

Responsibilities :

Application and project risks :

  • Manage evaluation of application security and provide advice on how to mitigate weaknesses
  • Perform vulnerability management, including following-up on remediation actions from vulnerability scans and penetration tests
  • Conduct risk assessments on new applications, infrastructure and projects to prevent and mitigate information security risks
  • Operational security :

  • Perform day-to-day review and approval of exceptional access rights from the business
  • Perform and implement ongoing controls to mitigate cybersecurity risk for the bank
  • Implement and enhance security to adapt to continuous delivery and Agile Scale
  • Assist in producing key risk indicators (KRIs) for senior management
  • Third party risks :

  • Perform information security reviews on projects that require outsourcing, including review of the vendor's security capability and risk of data leakage
  • Remediation and awareness :

  • Participate in remediation of weakness identified by the bank or regulators
  • Assist in responding to and triaging cybersecurity and data leakage incidents
  • Deliver trainings to business partners to reinforce information security awareness
  • Participation in committees :

  • Participate in regional and global governance meetings and normative committees where required
  • Provide updates within the team and liaise regularly with other teams in Asia, including technology, operational risk managers, risk management and business continuity management"
  • Profile Required


    Bachelor Degree in Information Technology or equivalent

    Professional qualification such as ITIL, CISM, CISSP

    Experienced Security Expert with 5-8 years of relevant experience"


  • Strong understanding of IT infrastructure and IT applicative framework architectures
  • Strong background of Information and Computer Security
  • Good understanding of application vulnerabilities and common exploits
  • Excellent English verbal and written communication skills, experience of influencing at senior organizational levels, up to and including MD level
  • Client oriented mindset, results driven, proactive and quick to react to requests
  • Innovative and bringing new ideas to improve processes."
  • Business Insight

    Company Description :

    Societe Generale is one of the leading European financial services groups. Founded in 1864, we have been playing a vital role in the economy for over 150 years.

    With more than 148,000 employees based in 76 countries worldwide, we accompany 32 million clients throughout the world on a daily basis.

    Based on a diversified universal banking model, the Group combines financial strength with a strategy of sustainable growth.

    Our expertise in the Asia Pacific region ranges from Corporate & Investment Banking (Advisory, Financing and Global Markets) to Asset Management, Securities Services, Trade Finance and Cash Management Services.

    Leveraging on our formidable global footprint, we serve corporates, financial institutions and the public sector. With our regional headquarters in Hong Kong, we operate in 11 countries across Asia Pacific, employing over 6,600 employees.

    You can find us in Beijing, Seoul, Tokyo, Singapore, Mumbai, Sydney and other locations in the region.

    At Societe Generale we have developed and continue to develop advanced programmes to support your career development. A diverse and comprehensive Learning & Development programme, a Junior programme for graduates and a Remuneration policy that stimulates your growth are just a few examples that illustrate how we help you to fulfill yourself personally and professionally, and how we develop your ability to adapt to ever-changing environments and transform challenges into opportunities."

    Department Description :

    Reporting to the Global Business Service Unit (GBSU), the Data & Cybersecurity (DCS) is responsible for securing and steering Information Security and Cybersecurity related risks falling under Global Banking & Investor Solutions' (GBIS) remit.

    The team is based in Hong Kong and has transversal oversight on Asia Pacific.


    Thank you for reporting this job!

    Your feedback will help us improve the quality of our services.

    通過點擊“持續”,我允許neuvoo同意處理我的數據並向我發送電子郵件提醒,詳見neuvoo的 隱私政策 。我可以隨時撤回我的同意或退訂。