Total 5 technical analyst job vacancies in Legal / Public / Security category in Hong Kong

As a Security Operations Analyst within the Security function, you will play a key role in protecting the organisation through proactive threat monitoring, vulnerability management, incident response, and operational resilience coordination across local, regional, and platform environments.

The Security Function operates as a 1.5 line of defense within the organisation, supporting security governance, engineering, and operational security capabilities across the business.

You will work closely with Security Engineering, Infrastructure, Engineering, Product, Platform, and GRC teams to strengthen operational security, resilience readiness, and security response capabilities across modern cloud-native and AI-driven environments.

The primary focus areas of this role include:

• Threat & Vulnerability Management
• Security Monitoring & Operations
• Incident Response
• Operational Resilience Planning & Coordination

This role is ideal for a hands-on security professional who enjoys operational security, incident investigation, threat analysis, operational coordination, and continuous improvement of security operations processes and capabilities.

As a GRC Analyst within the Security function, you will support the execution and continuous improvement of governance, risk, compliance, and operational resilience practices across our brands, including foodpanda, foodora, and Yemeksepeti.

The Security function operates as a 1.5 line of defense within the organisation, with the GRC team responsible for defining and maintaining the security posture across local, regional, and platform domains.

You will work closely with internal stakeholders to support governance activities, compliance initiatives, operational processes, and risk management efforts across the organisation.

This role is ideal for someone early in their cybersecurity or governance career who has an interest in data, automation, and operational process improvement, and is eager to gain exposure to modern cloud-native, AI-driven, and product engineering environments.

Key areas of support include:

• Information security governance
• Regulatory and audit compliance
• Technology and cyber risk management
• Security policy and control management
• Third-party and vendor risk management
• Cloud and platform compliance
• Data and customer protection governance
• Operational resilience governance
• Security reporting, automation, and operational efficiency

Information Security Analyst - Financial Services

Job Summary

Responsible for cyber governance, risk management, and security operations within a regulated financial services environment. Develops and implements security policies, ensures regulatory compliance, coordinates security testing, and manages incident response and business continuity programs.

Key Responsibilities

Governance & Compliance:

• Provide cyber governance and risk management oversight
• Develop and maintain security policy framework and standards
• Ensure compliance with applicable regulations and standards (ISO 27001, NIST, regional financial services guidelines)
• Manage and track vulnerability remediation status
• Coordinate penetration testing and escalate material security risks to senior forums
• Conduct third-party due diligence for compliance and operational risk

Risk & Incident Management:

• Identify and assess cyber risks; recommend security solutions and initiatives
• Monitor security alerts and investigate security breaches and incidents
• Manage security incident response according to established protocols
• Maintain incident response plans and playbooks
• Develop and maintain Business Continuity Program; coordinate with department operations to create unified business continuity plan

Regulatory & Stakeholder Relations:

• Act as primary contact for senior management and regulatory body inquiries
• Ensure audit findings are remediated and independently validated within agreed timelines
• Conduct annual disaster recovery exercises with internal and external parties
• Provide security advisory on emerging threats and vulnerabilities

Access & Infrastructure:

• Develop and implement identity and access management policies
• Monitor and audit user access activities
• Assess infrastructure, systems, and applications for compliance and vulnerabilities

Awareness & Training:

• Maintain user cyber awareness programs
• Coordinate security awareness training for staff

Required

• 5 years' information security experience
• Strong analytical and problem-solving skills
• Familiarity with SIEM tools (Splunk) and vulnerability assessment tools (Tenable Nessus)
• Strong written, oral, and presentation skills
• Undergraduate degree in Computer Science, Information Technology, Engineering, or equivalent

Preferred

• CISSP, CISA, or CEH certification
• Graduate degree in related field
• Knowledge of regional financial services regulations and guidelines

Client introduction

Our client is an established financial institution, and regulated by the Monetary Authority of Singapore.

As part of strengthening its technology governance and security function, the firm is looking to hire an IT Security Analyst (Governance, Risk & Compliance) to join its infrastructure and security team. This role is well suited for someone with a foundation in IT risk, governance, assurance or security compliance, who is looking to build broader exposure across cyber governance, audit, vulnerability management, vendor due diligence and security operations within a regulated financial services environment.

Job responsibilities

• Support the review and overhaul of the firm's IT and security governance framework, drafting policies, standards and procedures for senior review and refinement.
• Help embed clear, well-understood policies and procedures across the organisation, aligned with regulatory expectations.
• Support compliance against MAS guidelines, including Technology Risk Management, Cyber Hygiene and Outsourcing, and assist with related risk assessments.
• Coordinate internal and external audit activity, including collating responses, gathering supporting artefacts and following up on findings with internal stakeholders through to closure.
• Track vulnerability assessment findings and remediation progress (assessments are run through an external vendor), working with the infrastructure and application teams to close gaps in good time.
• Conduct third-party and vendor due diligence in line with MAS outsourcing requirements, and respond to client and counterparty due diligence queries on the firm's security controls and governance practices.
• Support user access reviews, joiner-mover-leaver processes and identity access governance.
• Assist with business continuity, disaster recovery and related assurance exercises.
• Provide support on security operations and incident response coordination where required, with guidance from the team lead.

Job requirements

• At least 4 years of experience in IT risk, IT governance, technology assurance, IT audit or IT compliance, gained within a regulated financial institution such as a bank, securities or brokerage firm, asset manager or insurer.
• Working familiarity with the MAS Technology Risk Management Guidelines, Cyber Hygiene Notice and Outsourcing Guidelines.
• Exposure to audit coordination, evidence gathering, policy documentation, risk assessment or remediation tracking.
• A genuine interest in cyber security and a willingness to learn the hands-on operational side of the role. Deep SOC or security engineering experience is not required.
• Exposure to vulnerability management, access reviews, SIEM or IAM tooling is an advantage rather than a requirement.
• Strong written and verbal communication, with the ability to engage auditors, vendors, infrastructure and application teams, and business stakeholders clearly.
• A detail-oriented, proactive working style and a readiness to learn across both governance and operational security.
• Relevant certifications such as CISA, or progress toward them, are advantageous but not mandatory.

Why you should join them

• Breadth of exposure that is rare at this level, spanning governance, risk, compliance, audit and security operations in a single role, giving the right person a strong foundation early in their career.
• Direct mentorship from an experienced infrastructure and security team lead, who will actively coach the successful candidate on the technical and operational aspects of the role.
• A genuine opportunity to help rebuild and mature the firm's IT governance framework, with visible impact in a lean team.
• Regular interaction with auditors, vendors and counterparties, building a clear path toward a career in IT risk and security governance.

JL
Reg. No. R1766249
BeathChapman Pte Ltd
Licence no. 16S8112

Global Security Operations Centre (GSOC) Analyst, Asia-Pacific

The APAC Global Security Operations Centre (GSOC) Analyst will be based in Kuala Lumpur,Malaysia providing regional threat detection, intelligence collection and analysis, risk incident triage and escalation as well as crisis management support (administrative & operational) for the firm across APAC. The Analyst supports and works integrally with the 24/7/365 APAC GSOC team based in Singapore. This is an opportunity to grow within a mature corporate security operation and work with seasoned regional security experts, gaining competency to key aspects of mature corporate security operations. The successful candidate should be a self-driven and resilient individual, with the ability to perform under pressure and deliver across competing priorities.

• Threat Detection & Reporting: Proactively gather and analyze information from various internal/external sources and draft reports to provide management and global contacts with useful, timely and actionable intelligence.

• Incident Management: Support regional senior management and line-of-business (LOB) stakeholders by triaging risks and underpinning business continuity during incident or crisis.

• Crisis Management Operational Support: Perform incident case and records management, progress logging, and stakeholder messaging and enterprise mass notification.

• Travel Security: Manage and administer travel security operations including tracking, assisting and advising international travelers on any incident or crisis.

• Regional Aptitude: Coordinate with other regional GS leaders or GSOCs fortrans-national incidents or crises or other aspects of security operations.

• Cross-Team Collaboration: Work closely with other incident management partners such as Real Estate, Global Technology Infrastructure, Resiliency, LOB Business Resiliency and Global Security managers to ensure effective coordination and operations.

• Manage any other duties or projects as directed by APAC Global Security senior managers, including Technical and Physical Security tasks.

Requirements

• Minimum of Bachelor’s degree or post-graduate level qualification, particularly in relevant fields e.g. security studies, international relations, geomatics,criminology or social sciences. 

• Strong knowledge and interest in security and geo-political developments across APAC with strong initiative to independently assess emerging themes, events and incidents with potential to impact business, client and third-party locations and travelers across region.

• Ability to work effectively under pressure in a fast-paced environment while consistently producing error-free work and meeting deadlines. 

• Strong analytical, interpersonal skills and comprehensive computer skills (good understanding of all Microsoft applications and willingness to work in a high-technology role regularly utilizing new tools and applications).