{"id":2397810,"url":"https://alion.io/job/hkexgroup-senior-information-security-engineer-avp","title":"Senior Information Security Engineer - AVP","company":{"id":1972923,"name":"HKEX","domain":"hkexgroup.com","url":"https://alion.io/company/hkexgroup","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":27,"ghost_share":0,"stale_share":0.556,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shenzhen, China"],"countries":["CN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":48000,"max_usd":117000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":269},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CIS Benchmarks","optional":false},{"name":"SIEM","optional":false},{"name":"CyberArk","optional":true},{"name":"ISO 27001","optional":true},{"name":"Linux","optional":true},{"name":"Splunk","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-08T00:00:00Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-22T07:18:33Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Location:\nCN-Shenzhen-HyQShift:\nScheduled Weekly Hours:\n40Worker Type:\nPermanentJob Summary:\nJob Duties:\nPosition Summary\nWe are seeking an experienced Information Security professional to lead and execute information security governance, security operations, security compliance, vulnerability management, and security monitoring initiatives across our business platforms.\nThe successful candidate will be responsible for aligning local security practices with Group security standards, driving security governance programs, managing security tools and controls, coordinating security assessments, and supporting security incident response activities.\nKey Responsibilities\n1. Security Operations & SOC\nOwn and maintain security monitoring processes and operational procedures.\nCoordinate SIEM and log management initiatives.\nWork with Group SOC and MSSP teams on security monitoring, alert handling, and escalation processes.\nDefine log collection standards, onboarding scope, and monitoring requirements.\nParticipate in threat detection and security operations improvement initiatives.\n2. Security Incident Response\nDevelop and maintain Security Incident Response Plans and procedures.\nCoordinate incident investigation, containment, eradication, recovery, and post-incident review activities.\nDefine security incident escalation workflows and communication mechanisms.\nOrganize security drills, tabletop exercises, and response testing.\nSupport regulatory and compliance-related incident reporting requirements.\n3. Vulnerability & Security Assessment Management\nManage vulnerability scanning programs and security assessment activities.\nTrack vulnerability remediation progress and risk mitigation activities.\nCoordinate: \nVulnerability Scanning\nPenetration Testing\nSecure Configuration Reviews\nSource Code Reviews\nApplication Security Testing\nCIS benchmark\nSecurity Architecture Reviews\nPrepare risk acceptance documentation and remediation plans.\n4. Identity & Access Management\nManage privileged account governance and PAM/PIM controls with Change management team. \nCoordinate periodic access reviews and account audits.\nMaintain privileged account management standards and procedures with change management team. \n5. Security Technology Management\nManage and govern security solutions including but not limited to:\nSIEM\nWAF/Anti-DDOS\nIPS/IDS\nEndpoint Security\nPAM/PIM\nWeb Proxy\nKMS/Certificate Services\nSecurity Monitoring Platforms in Tencent Cloud\nResponsibilities include:\nSecurity product selection and evaluation\nVendor management\nSecurity architecture review\nSecurity product implementation and optimization\nSecurity product lifecycle management\n6. Security Compliance & Regulatory Requirements\nCoordinate MLPS (等保) assessments and remediation activities.\nSupport internal and external audits.\nMaintain compliance with applicable security regulations and standards.\nManage third-party security assessments and compliance reviews.\nCoordinate security-related regulatory reporting and evidence collection.\nQualification Requirements\nEducation\nBachelor's degree or above in: \nInformation Security\nComputer Science\nInformation Technology\nCyber Security\nRelated disciplines\nExperience\n5+ years of Information Security experience\nExperience in security governance and compliance programs\nExperience with SOC/SIEM operations and log management\nExperience managing security projects and vendors\nExperience working with regional or Group security organizations is highly preferred\nFinancial services or regulated industry experience is highly desirable\nTechnical Skills\nHands-on experience in several of the following areas:\nSecurity Operations Center (SOC)\nSIEM Platforms (Splunk, ArcSight, 日志易, etc.)\nVulnerability Management(Tenable)\nPenetration Testing Coordination\nSecurity Incident Response\nPAM / PIM Solutions (CyberArk/RenkEZ)\nWindows / Linux Security(CIS benchmark)\nNetwork Security\nCloud Security\nEndpoint Security\nSecurity Compliance Frameworks\nSecurity Architecture Review\nPreferred Certifications\nOne or more of the following:\nCISSP\nCISM\nCISA\nISO27001 Lead Implementer/ISO27001 Lead Auditor\nSecurity+\nSoft Skills\nStrong stakeholder management skills\nStrong communication and presentation skills\nAbility to coordinate across multiple teams and vendors\nStrong analytical and problem-solving skills\nRisk-based decision-making mindset\nAbility to work independently with minimal supervision\nCompany Introduction:\nITD SZ\n港交所科技（深圳）有限公司，是2016年12月28日于深圳市前海自贸区成立的外商独资企业。\n作为港交所的技术子公司，港交所科技（深圳）有限公司主要是为集团及其附属公司提供计算机软件、计算机硬件、信息系统、云存储、云计算、物联网和计算机网络的开发、技术服务、技术咨询、技术转让; 经济信息咨询、企业管理咨询、商务信息咨询、商业信息咨询、信息系统设计、集成、运行维护; 数据库管理、大数据分析; 以承接服务外包方式提供系统应用管理和维护、信息技术支持管理、数据处理等信息技术和业务流程外包服务。","description_format":"text","description_chars":4677,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-12T22:50:07Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":0.9,"age_days":16,"expected_fill_days":43,"reasons":["conf:46","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/hkexgroup-senior-information-security-engineer-avp","json_url":"https://alion.io/job/hkexgroup-senior-information-security-engineer-avp.json","meta":{"generated_at":"2026-10-24T06:48:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10048,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1972923},"rest":"https://alion.io/mcp/rest/get_company?id=1972923"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhkexgroup-senior-information-security-engineer-avp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhkexgroup-senior-information-security-engineer-avp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhkexgroup-senior-information-security-engineer-avp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hkexgroup-senior-information-security-engineer-avp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhkexgroup-senior-information-security-engineer-avp"}]}