Assistant Manager, Security Operations

John Swire & Sons (H.K.) Limited

A highly-diversified and global corporation, the Swire Group’s businesses encompass property, aviation, beverages and food chain, as well as marine and trading & industrial activities. Its core businesses are mainly focused in Asia, with its key operations in Hong Kong and the Chinese Mainland. Within Asia, Swire's activities come under the Group's publicly quoted arm, Swire Pacific Limited, which is the largest shareholder in two Hong Kong listed companies: Swire Properties and Cathay Pacific Airways.

John Swire & Sons (H.K.) Limited is the holding company of the publicly-listed conglomerate, Swire Pacific Limited. Our Cybersecurity Department is now expanding, and inviting candidates to apply for the following position:

Assistant Manager, Security Operations

As part of our growing team, this newly created role will contribute to implementation of capability initiatives and projects related to Cyber Defence strategy, commensurate with our operating companies’ security exposures and maturity, to continuously enhancing the Cyber Defence function. The role will also conduct research and study on new security technologies, processes, and control standards development, to uplift the cybersecurity maturity and protect IT assets on-premises and in the cloud-based environments.

Responsibilities: 

• Support the execution of CSIRT capability framework for Swire Group, including but not limited to governance structure, detection and response capability, security technology tools, threat intelligence workflows and process development
• Review and improve Cyber Defence response capabilities, Managed EDR service capabilities and Managed SOC service capabilities for operating companies, to deliver timely alert, analyse, and respond to cyber threats
• Assist the development of cybersecurity incidents response policy and procedure, and provide incident support to significant information security events for the Group if any and when necessary
• Support incident triage and investigation, and handle incident response and post-mortem reporting 
• Manage and develop EDR tools related best practices and advanced threat hunting technique, to increase visibility of cyber threat and ensure timely threat detection, and response capability and quality
• Develop and administer Cyber Defence tools, and security operation related processes and applications in operating companies, to ensure effective compliance of Cyber Defence policies and processes
• Prepare threat intelligence analysis and respective intelligence communications and recommendations, to mitigate cyber threats to Swire systems and applications
• Provide management an oversight for cyber threat identification, triage, and response of events or incidents which could lead to security breaches

To be successful in this role, you must have:

• A Bachelor’s degree in Information Security Management, Computer Science, Computer Engineering, Network and Telecommunication, or Information Systems Management
• A minimum of 5 years’ cybersecurity working experience, with at least 2 years in cyber defence or security operations
• Professional certifications such as CISSP, OSCP, CCNP, CHFI, GCIH, is preferred
• Proven track record in security operation processes e.g. security patch management process, PAM, and OS lifecycle management process etc.
• Sound knowledge and experience in SIEM, threat intelligence platforms, Cloud platforms, EDR, MDR, Cyber threats and exploitation methods, IOC, and infrastructure security 
• Excellent communication skills in both written and spoken English and Chinese. Fluent Putonghua is desirable

Application:
At Swire, we are committed to creating an inclusive and supportive working environment for all our people regardless of their age, gender, gender identity, sexual orientation, relationship, family status, disability, race, ethnicity, nationality, religious or political beliefs. We believe in creating an environment where people feel comfortable at work and are able to realise their full potential.

We offer a competitive package to the right candidate. If you meet the qualifications and are interested in this position, you can send your application by clicking ‘Apply Now’. We will contact all shortlisted candidates.
 

The Swire group is an equal opportunity employer. All applications will be used exclusively for selection purposes and handled confidentially by authorised personnel only. Your application may also be considered for other suitable positions within the Swire group (please indicate clearly on your application if you would not like to be considered for other positions within the group.) Following the data privacy ordinance, all unsuccessful applications will be destroyed after an appropriate time.