FOR ALL IT SOLUTIONS AND HR NEEDS

Responsibilities:

• As the first line of defence to identify relevant risk and control measures of the Pension Service (administrative) operation functions.
• Perform operational, including data and technology, risk and control assessment as the first line of defence

• Assist the operation teams to compile relevant risk appetite statements and risk indicators

• Conduct regular risk and control reviews on operation teams and Pension Services to identify key operational risks together with recommendations for mitigation measures
• Maintain and develop positive and professional working relationships with other teams across internal and external stakeholders

• Support project team for various task of operation setup and platform development

• Oversee data management tools SAP Data services and relevant controls of data management
• Work closely with Risk and Compliance department to manage regulatory, compliance, operational and data and technology risk matters.

Requirements:

• Degree holder in Accounting, Business or related subjects
• Experience in compliance, audit or operational risk in the financial industry
• Familiar with the Pension product and have a good understanding of risk and control assessment in pension product 
• Strong analytical and project management skills to enhance procedures and controls
• Strong people management skills and able to drive change
• Excellent written and verbal communication skills and is able to negotiate and work effectively with senior business and stakeholders across internal and external stakeholders

 • Strong problem solving and prioritization skills and be able to perform multi-task under pressure

Job Descriptions:

• Develop, maintain and guidance on Applicaiton Security Testing framework and plan
• Assist in define the application security testing and security assurance assessment metholdologies
• Manage the aapplication security testing, with analysis of the security intelligence feeds.
• Analyzing the results of the application security testing
• Conduct and assist the stakeholders with identified viable and workable remediation solutions
• Elaborate with Development team on identified issues and remediation
• Prepare the report and schedules that will be delivered to clients and other parties

Requirements:

• At least 4 years experiences in Penetration testing and common vulnerability assessment tools, as well as, using MITRE ATT&CK or similiar framworks,
• Program languages: JAVA, Python, Apple Swift, Kotlin (non mandatory)
• Technologies: Unix command line, Katalon automation testing, SonarQube code review, JIRA, Metasploit - System Vulnerability exploitation "knowledge", Burp Suite - Web application testing "knowledge"
• CISSP or CSSLP (non mandatory)
• Successful candidate will be employed by 1-year contract based.

Responsibilities:

• Perform remote console management
• Monitor system messages and batch jobs
• Ensure failure jobs are properly logged to the IT Service Management system
• Call relevant support according to the nature of the incidents
• All the actions taken must be updated to the IT Service Management system.
• Re-run failure jobs after support fix the problem
• Adhere to SMC Security Policy

Required Skills:

• Holder of Higher Diploma or above, candidate who studied IT-related subjects studied is highly preferred
• Possess basic operation knowledge in Windows and basic PC Skills
• Knowledge of Unix / Network is preferred
• A good team player with analytical & problem-solving skills, self-motivation and good interpersonal skills
• Good command of spoken and written English and Chinese