A senior security architect position in a well-established company.

About the responsibilities:

• Enable delivery of secure solutions with speed by driving convergence of security solutions and reuse
• Develop target architecture for security at Strategic Programmes and DevSecOps. Establish and maintain a roadmap to help us get there as well as tracking progress
• Contribute to a security architecture process that enables the enterprise to develop and implement secure solutions and capabilities that are clearly aligned with business, technology, and threat drivers
• Create and maintain security architecture artefacts (i.e. models, patterns, templates, etc) that can be used (and reused) to leverage security capabilities in new initiatives and operations
• Participate in the Architecture Design Board to ensure alignment of technology projects to the target security architecture

About the requirements:

• Sound knowledge and understanding of latest security tools, security design methodologies, architecture frameworks and security risk assessment methods
• Relevant professional certifications (such as TOGAF, CISSP, CISM, GSE, or other equivalent) preferred
• Ability to speak Cantonese and/or English with good communication skills Able to accept technical challenges involved with defining the future of security A passion for educating and working with diverse technical teams
• Experience in security technologies including web application security, anti-bot solutions, WAF, application layer firewalls, IDS/IPS, SIEM, stateful inspection,TCP/IP, cryptography, authentication, OAUTH2.0, PCI DSS, different web application vulnerabilities, different attack vectors, vulnerability assessment and application penetration testing
• Experience with fundamental Internet protocols: BGP, GRE, MPLS, CDN, TCP/IP, SSL/TLS, HTTP, FTP, DNS
• Broad security and technology knowledge including DevSecOps and cloud infrastructure
• Knowledge of ISMS, ISO27000 series, OWASP Top 10 and other major information security frameworks