Infrastructure Security Specialist

Permanent contract|Hong Kong|IT (Information Technology)

Infrastructure Security Specialist

Hong Kong, Hong Kong Permanent contract IT (Information Technology)


Responsibilities : 

  • Work closely with SOC, CERT and other security teams and Infrastructure skill teams in daily operation and review security requirements
  • Exception management: Evaluate and manage infrastructure security exceptions
  • Vulnerability management: Conduct scan, assessment and remediation follow-up
  •  Incident management: Report and follow security incidents and their remedial actions
  • Request / Change management: Conduct security assessment for infrastructure request & changes
  • Review security architecture proposed by other infrastructure teams
  •  Deliver innovation initiative to improve overall infrastructure security and efficiency
  • Manage and execute the Infrastructure related security projects
  • Be the security Interface with stakeholders at all levels, from technical engineers to senior management
  • locally, regionally and globally
  • Work closely with other risk and security departments, including all 3 lines of defence
  • Cyber reporting: Production of various cyber security reporting (KPIs; KRIs). Coordinate among
  • Infrastructure teams to contribute to external stakeholders reporting and requests
  • Conduct security & risk awareness training to the Infrastructure teams

Profile required

Profile Requirements:


  •  Kowledge and hands-on experiences in IT, Infrastructure and information security
  •  Knowledge and experience in IT infrastructure (speak the language, expertise not required)
  •  Knowledge in technology regulatory requirement like HKMA, SFC, MAS, GDPR, CBIRC, etc. is required
  •  Project management experience is desired
  •  Knowledge and experience in a banking environment will be beneficial but not essential
  •  Knowledge in the MITRE ATT&CK framework and hands-on experience on security incident investigation processes & techniques
  •  Security knowledge in the Public Cloud, development and specific Infrastructure domains are a plus
  • Professional certification recognized by Regulatory bodies like HKMA, e.g. CISM, CISA or CISSP, is mandatory


  •  Hands on knowledge on Security Products/tools such as Identity Management Solution, SIEM, vulnerability management and other security products
  •  Scripting and automation skills is a plus

Soft Skills

  •  At least 8 years relevant experience
  •  Able to organize time, multitask, and define priorities (autonomy)
  •  Able to interact with all level of the organization from operators to executive management members
  •  Must be able to work collaboratively within a complex organization, across multiple cultures, geographies and disciplines
  •  Good communication and interpersonal skills
  •  English proficiency is essential, other spoken languages in the APAC region or French is an advantage 

Business insight

Company Description

Societe Generale is one of the leading European financial services groups. Founded in 1864, we have been playing a vital role in the economy for over 150 years. With more than 133,000 employees based in 61 countries worldwide, we accompany 32 million clients throughout the world on a daily basis. Based on a diversified universal banking model, the Group combines financial strength with a strategy of sustainable growth.ASIA-PACIFIC (ASIA), as one of the Business Units of Societe Generale, operates in 12 locations across the Asia Pacific region, employing over 2,500 employees with the regional headquarter located in Hong Kong. Our activities here are centered on Societe Generale's Global Banking & Investor Solutions pole (GBIS), a major growth engine for the Group and a key pillar of Societe Generale's universal banking model. Our expertise in Asia Pacific ranges from Corporate & Investment Banking (Advisory, Financing and Global Markets) to Asset Management, Global Transaction Banking and specialised financial services like Equipment & Vendor Finance and Vehicle Leasing & Fleet Management. In addition, Societe Generale's Global Solution Centre (SGGSC) in Bangalore and Chennai offers customised business solutions to the Societe Generale Group globally including ASIA.

Department Description
The IT Infrastructure department, Global Technical Services (GTS), is one of the major stakes for the bank and is at the heart of Societe Generale group's strategy.
 Today, the Digital Transformation raises important challenges around IT Architecture, Infrastructure and Security. Many of these challenges are opportunities to imagine new experiences for our clients and new way to deliver IT services.
Within the Resources and Innovation division, GTS department plays a key role in the Digital Transformation. With more than 3500 GTS staff located across the world, GTS develops innovative projects while delivering operational excellence for infrastructure services to 148,000 employees and 32 million external clients.
GTS staff motivation comes from the new technologies they deliver to enhance agility of the various business lines (Cloud, Big Data, Continuous Delivery).

  •  Protecting the GTS infrastructures, the associated IT services and manages the operational risks. 
  •  Secure Infrastructure of the bank via detect and respond security incidents
  •  Improve the level of operational risk and security management for GTS
  •  Provide seamless security by design, focusing on critical assets and data protection
  •  Raise Security Awareness for SG staffs
  •  Be the Governance, Risk & Compliance Expert Center for GTS

We are an equal opportunities employer and we are proud to make diversity a strength for our company. Societe Generale is committed to recognizing and promoting all talents, regardless of their beliefs, age, disability, parental status, ethnic origin, nationality, gender identity, sexual orientation, membership of a political, religious, trade union or minority organisation, or any other characteristic that could be subject to discrimination.

Reference: 21000WT0
Entity: Societe Generale Hong Kong Branch
Starting date: immediate
Publication date: 2022/01/13