Manager, Information Security
Core
Support the bank's cyber defence functions by assisting with MSSP operations, performing security assurance tasks, and participating in purple team exercises in a regulated banking environment.
Role type
Manager, Information Security
Builds
Security monitoring, control testing, and threat-based validation activities
Domain
Banking / Financial Services / Cybersecurity
Required skills
MSSP operations, security monitoring, SIEM/EDR use case maintenance, vulnerability management lifecycle, threat hunting, attack simulation, control testing, documentation, compliance record management
Preferred skills
Banking/finance sector experience, NIST CSF, ISO 27001, OWASP, HKMA ECF certifications
Technologies
SIEM, EDR, Metasploit, Cobalt Strike
Responsibilities
Monitor MSSP alerts and escalations, perform initial triage of security events, maintain SIEM/EDR use cases and detection rules, prepare MSSP performance summaries and KPI reports, support control testing activities across EDR, network security, and application security, lead the end-to-end vulnerability management lifecycle, conduct proactive threat hunting exercises, conduct attack simulations to validate detection coverage
Seniority
Manager, hands-on IC