Job Summary: The successful candidate will be responsible for managing and maintaining enterprise security configuration standards and baselines, reviewing and adopting the latest Center for Internet Security (CIS) Benchmarks, overseeing updates to security configuration scanning tools, developing and reviewing Generic Security Baselines (GSBs), and ensuring security configuration standards remain current and effective.

Responsibilities:

• Manage and maintain enterprise security configuration standards and baselines.
• Review and adopt the latest CIS Benchmarks, ensuring alignment with HKEX security requirements.
• Oversee updates to security configuration scanning tools to incorporate the latest CIS Benchmarks and security checks.
• Develop, review, and maintain GSBs for technologies and platforms not covered by CIS Benchmarks.
• Ensure security configuration standards remain current, effective, and aligned with industry best practices and regulatory requirements.
• Administer the security exception management process for security findings.
• Review and validate exception requests to confirm that appropriate business justification, risk assessment, compensating controls, and management approvals are in place.
• Assess and validate potential false-positive findings identified through security configuration scans.
• Maintain accurate records of approved exceptions and monitor their validity periods and expiry dates.
• Perform governance and approval activities to ensure security standards and operational requirements are met.
• Review and approve website, file upload, and email whitelisting requests in accordance with established security policies and risk management requirements.
• Review and approve encryption key management requests and related activities according to cryptographic standards and key management requirements.
• Review and approve requests related to internal Certificate Authority (CA) certificates and ensure proper issuance, renewal, usage, and management of digital certificates.
• Review and approve SUDO registration and privileged escalation and ensure requests are granted with least-privilege and security governance principles.
• Conduct Security Acceptance Checklist (SAC) reviews and approvals as part of the SDLC process control.
• Assess and approve SSR requests stating security requirements are not applicable, ensuring adequate justification and risk assessment are documented.
• Review and approve requests for installation of non-standard software, with evaluation of associated operational, security, compliance, and technology risks.

Requirements:

• Minimum 10 years of relevant experience in information security governance, information security, technology risk management, compliance, or IT audit functions, preferably within financial services or a regulated environment.
• Good understanding of information security governance, risk, and control concepts.
• Strong understanding of CIS Benchmarks, control principles, and security governance processes.
• Excellent analytical, communication, and stakeholder management skills.
• Ability to analyse processes and identify gaps or improvement opportunities.
• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, or related discipline.
• Relevant professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, CCSP or equivalent are preferred.

XML job scraping automation by YubHub

The successful candidate will work in partnership with the Vice President responsible for Network Operations, jointly contributing to the leadership, strategy, capability development, and overall performance of the network organization.

Key responsibilities include:

• Co-leading the network function and collaborating with the VP responsible for Network Operations to establish technology strategy, organizational priorities, and capability development plans for the network organization
• Leading the Network Engineering team and providing technical leadership for the design, implementation, upgrade, migration, and optimization of HKEX's mission-critical network infrastructure
• Defining and maintaining network architecture standards, engineering governance frameworks, technology roadmaps, and technical design principles to support future business and market requirements
• Driving the delivery of strategic network initiatives, infrastructure transformation programmes, and technology refresh projects, ensuring successful execution within agreed scope, schedule, budget, and quality objectives
• Partnering closely with application development teams, solution architects, and business stakeholders to understand application communication patterns, traffic flows, protocol behaviour, and latency-sensitive requirements, and ensuring network solutions are optimized accordingly
• Leading end-to-end performance engineering initiatives by analysing application, server, transport, and network interactions to identify latency bottlenecks and implement enhancements that improve system performance
• Providing Level 3 technical leadership and acting as the highest level of escalation for major incidents, complex problem investigations, root cause analysis activities, and critical production issues
• Evaluating emerging network technologies and industry best practices, and developing strategies to improve network capability, resilience, security, scalability, and operational effectiveness across HKEX

Requirements:

• University degree in Information Technology, Computer Science, Engineering, or a related discipline
• Minimum 15 years of experience in network infrastructure engineering, architecture, project delivery, and technical leadership, with at least 5 years in a management or leadership role
• Strong expertise in enterprise and data centre networking technologies, including ACI, VXLAN, EVPN, SD-WAN, multicast networking, network security technologies, and low-latency network design
• Proven experience designing, implementing, upgrading, and migrating mission-critical network infrastructure within large-scale and highly available environments
• Demonstrated experience working with application development teams to analyse application traffic characteristics, protocol behaviour, network interactions, and end-to-end performance requirements
• Strong understanding of network protocols, packet analysis, multicast technologies, transport-layer behaviour, traffic engineering, and latency optimization techniques within distributed and performance-sensitive systems
• Proven ability to identify and manage technical risks, cross-domain dependencies, architecture challenges, and implementation complexities associated with large-scale technology initiatives
• Strong analytical, communication, stakeholder management, and leadership skills, with a track record of building high-performing engineering teams, developing technical talent, and driving engineering excellence

XML job scraping automation by YubHub

Job Responsibilities:

• Ensure the quality of developed Risk Management Systems
• Conduct review on the Business Requirements and Functional Specifications
• Test Strategy Design including Test Planning, Test Cases Design, Execution and Results verification
• Test Metrics Reporting
• Develop a test automation strategy based on the Enterprise’s test framework and tools
• Collaborate with team managers, developers and business stakeholders to understand the requirements and assist in resolving identified application issues.
• Lead a team for test cases design, execution and develop test automation

Requirements:

• Bachelor’s Degree in computer science, MIS, IT or related disciplines
• 4 to 6 years' experience in software testing, experience in automation testing is preferred
• Understand at least one development language (e.g. Ruby)
• Familiar with using basic Linux system operating commands (e.g. cp/rm/vi/mv)
• Experiences in large scale banking or exchange systems is an advantage
• Work experiences in Derivatives Markets is an advantage
• Possess independent and critical thinking
• Good written and reading English highly desirable
• Good PuTongWah skills is an added advantage.
• Capability of acquiring new (business) knowledge
• Good analytical and problem solving skills
• Good coordination, communication and interpersonal skills

XML job scraping automation by YubHub

The successful candidate will lead a team responsible for the architecture design, development, implementation, and production support of these systems, as well as collaborate with business and operations stakeholders to achieve common business results.

Responsibilities:

• Lead and manage all phases of application road map, architecture design, and life cycle for post-trade application systems
• Set, interpret, and drive strategic direction, and deliver technology that meets post-trade business requirements
• Plan, review, and implement system development and technical delivery through requirement definition with key business stakeholders, collaboration with other application teams and infrastructure team on common system and architecture impact, as well as exercise vendor management where appropriate
• Oversee production support for core mission-critical systems to attain robust system availability
• Foster continuous technology advancement and development of the department, as well as lead people management agenda including performance management and development
• Undertake assignments and projects as assigned by department head

Requirements:

• Degree in Computer Science, MIS, IT, or related disciplines
• At least 15 years' relevant experience, of which at least 10 years at management level
• Strong leadership skills and capabilities in managing complex IT agenda across diverse stakeholders
• Ability to define solutions that solve complex business problems
• Solid experience in managing and developing large-scale mission-critical systems on open platforms
• Knowledge of industry-wide technology strategies and best practices
• Knowledge of risk and controls landscape, ensuring company-wide standards are met
• Keen understanding of project control and budget management
• Strong interpersonal, communication, managerial, and people management skills
• Experienced in motivating large organizations and teams

XML job scraping automation by YubHub

Job Responsibilities:

• Design, develop, and implement next-generation clearing and settlement systems to support OTC derivatives.
• Maintain and enhance the OTC Clearing and Settlement System (OCASS), ensuring high availability and performance.
• Conduct unit, integration, and system testing; support user acceptance testing (UAT) phases.
• Work closely with business users, QA teams, and other IT units to ensure smooth implementation and delivery.
• Prepare and maintain comprehensive technical and functional documentation, deployment guides, and operational procedures.
• Identify opportunities for process automation and system optimization.
• Perform additional tasks assigned by the supervisor.

Job Requirements:

• Bachelor’s degree in computer science, Information Systems, or related IT disciplines.
• Minimum 5 years of hands-on experience in system development.
• Exposure to financial services or other highly regulated industries is an advantage.
• Strong proficiency in Java development.
• Experience in microservices architecture and cloud platforms (HCS preferred), including Kafka, Kubernetes, and containerized applications is preferred.
• Familiarity with DevOps tools and practices (e.g., Jira, GitLab, Nexus, JUnit, SonarQube, Docker).
• Knowledge of Spring Boot, GaussDB, Hibernate, and Linux scripting.
• Understanding of secure coding practices and performance tuning.
• Good command of written and spoken English.
• Excellent analytical and problem-solving abilities.
• Strong communication and interpersonal skills; ability to work effectively in a team environment.
• Self-motivated with the ability to manage tasks independently under minimal supervision.

XML job scraping automation by YubHub

Key Responsibilities:

• Provide production support and enhancements for critical web and cloud applications
• Manage and participate in all phases of the software development lifecycle, including requirement analysis, design, documentation, development, testing, deployment, and support
• Plan and perform regular system maintenance tasks such as technology refreshment, system performance monitoring, vulnerability management, and production incident resolution
• Lead and coach junior team members
• Liaise with other IT teams, business users, and external vendors

Requirements:

• Degree in Computer Science, MIS, IT, or related disciplines
• Minimum of 8 years of IT experience, focusing on supporting and maintaining mission-critical business applications
• Experience in application operations and support within highly regulated environments
• Hands-on experience with Java, Javascript, .Net framework, Oracle database/SQL Servers
• Knowledge of Redhat Enterprise Linux, Windows Server, and web technologies
• Understanding of microservice architecture, container-based application design, and cloud technologies
• Familiarity with software development and DevOps tools, including Maven, GIT, Jenkins, Docker, and Kubernetes
• Excellent communication and interpersonal skills
• Strong team player with attention to detail and commitment to quality
• Good command of written and spoken English and Chinese

XML job scraping automation by YubHub

Responsibilities

• Deliver application development, system enhancement, and technology modernization initiatives.
• Perform system analysis, architecture design, development, testing, and implementation for business-critical applications.
• Produce project deliverables, including functional specifications, technical design documents, and test plans.
• Collaborate with business users and stakeholders to gather, analyze, and translate business requirements into effective technical solutions.
• Provide production support for mission-critical systems and resolve technical issues in a timely manner.
• Identify and assess technology risks, and drive mitigation measures to ensure system stability, performance, and security.
• Collaborate with other IT teams on cross-functional initiatives involving system integration and shared platforms.
• Drive technical excellence and promote industry best practices throughout the software development lifecycle.
• Ensure compliance with organizational policies, standards, and governance requirements.

Requirements

• Degree in Computer Science, Information Technology, Management Information Systems, or a related discipline.
• Minimum 7 years of relevant experience in application development and production support.
• Proven experience in developing and supporting large-scale, high-availability, mission-critical systems.
• Strong programming and scripting skills in Java, JavaScript, React, Python, C/C++, and Linux shell scripting.
• Hands-on experience with web application development, Red Hat Linux, Apache, Tomcat, and Oracle and/or DB2 databases.
• Experience with AWS, Huawei Cloud, and/or Microsoft .NET technologies is an advantage.
• Good understanding of DevOps practices and modern software development methodologies.
• Knowledge of the securities and/or derivatives industry is preferred.
• Strong analytical, problem-solving, interpersonal, and communication skills, including the ability to communicate effectively in both verbal and written form.
• Self-motivated, proactive, and able to work effectively in a fast-paced environment.

XML job scraping automation by YubHub

You will be involved in the full software development lifecycle, including design, development, testing, deployment, and production support of modern web applications used by all listed companies.

Key Responsibilities:

• Collaborate with cross-functional teams to analyze business requirements and propose practical, scalable, and sustainable technical solutions.
• Participate in project planning, scheduling, change management, issue resolution, and release management.
• Define, plan, and execute testing activities to ensure applications meet functional and non-functional requirements.
• Support application delivery throughout the project lifecycle, including requirements analysis, solution design, testing, deployment, and production support.
• Coordinate with development teams and vendors to ensure quality deliverables, timely execution, and compliance with established standards and best practices.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, Software Engineering, or a related discipline.
• Minimum 4 years of experience in developing, implementing, and supporting mission-critical, enterprise-scale web applications.
• Proven experience as a System Analyst or equivalent role, working closely with development teams and managing vendors throughout the full project lifecycle.
• Strong analytical, problem-solving, and troubleshooting skills, with attention to detail.
• Ability to translate business requirements into robust, scalable, and maintainable technical solutions.
• Understanding of cloud technologies, microservices architecture, event-driven architecture, and distributed systems.
• Experience with Single Page Applications (SPA), API design and governance, RESTful services, and API documentation standards such as OpenAPI/Swagger.
• Knowledge of database design, data modeling, and technologies such as PostgreSQL, GaussDB, and Redis would be an advantage.

Benefits:

• HKEX is an Equal Opportunity Employer and values diversity in the workplace.

Location:

• HKEX - TKO

Shift:

• Standard - 40 Hours (Hong Kong SAR)

Scheduled Weekly Hours:

• 40

Worker Type:

• Contract

XML job scraping automation by YubHub

Job Responsibilities:

• Partner with application teams on IT solution configuration and review
• Interact with internal and external parties on planning and execution
• Play a role in incident and problem management, including impact assessments, troubleshooting, and remediation and prevention
• Compile operation and technical documents, such as knowledge bases, technical procedures, and test reports
• Automate BAU processes
• Provide production support, including on-call duties when required
• Execute changes in accordance with change management procedures
• Support mission-critical systems with high availability requirements
• Manage patching, vulnerability remediation, and system hardening
• Support audit, regulatory, and internal control requirements
• Coordinate with data centre operations and vendors for infrastructure issues
• Collaborate with the Cyber security/infrastructure engineering and project teams to adopt modern technologies, such as multi-cloud and container orchestration, to enhance manageability

Job Requirements:

• Degree in Computer Science, Information System, or IT-related disciplines
• 8+ years of direct, hands-on RHEL administration experience
• Advanced knowledge of System tuning and troubleshooting
• Familiarity with scripting (Bash)
• Experience with enterprise virtualization and private cloud platforms (e.g., VMware, OpenStack, DCS, HCS)
• Familiarity with Automation practices and tools (Ansible)
• Experience managing change implementation on large-scale systems
• Good team player with passion to learn and aspirations for career development in the financial industry

XML job scraping automation by YubHub

The successful candidate will work with project, application, and infrastructure teams to deliver secure, stable, highly available, and well-performing database services.

Key responsibilities:

• Design, implement, and support enterprise database platforms, including Oracle, DB2, PostgreSQL, and GaussDB.
• Provide database architecture, configuration, and technical advice for projects and BAU activities.
• Lead, mentor, and develop a team of database administrators and database engineers.
• Maintain database availability, performance, security, and capacity in critical, high-throughput environments.
• Perform database installation, patching, upgrade, migration, backup, recovery, and performance tuning.
• Support high availability, disaster recovery, switchover, failover, and recovery testing.
• Monitor database health, troubleshoot incidents, and resolve database-related problems.
• Define database standards, operating procedures, and technical documentation.
• Automate routine database administration and operational tasks using scripts and tools.
• Collaborate with application, infrastructure, security, and project teams on database requirements.
• Provide technical guidance and review database deliverables to ensure quality and compliance.

Requirements:

• Degree holder in Computer Science, Computer Engineering, Information Technology, or a relevant discipline.
• Minimum 10 years of experience in database administration, engineering, or support.
• Strong hands-on experience with enterprise relational databases such as Oracle, DB2, PostgreSQL, or GaussDB.
• Experience in database high availability, backup and recovery, performance tuning, patching, and upgrades.
• Experience in people management.
• Experience in implementing and operating databases in accordance with company compliance, security, and hardening standards.
• Experience in Linux and scripting for database automation, with good troubleshooting, analytical, communication, and teamwork skills.

XML job scraping automation by YubHub

The successful candidate will ensure highly available, secure, resilient, and scalable network services while driving automation, AI adoption, and operational excellence to support HKEX's strategic objectives.

Key responsibilities:

• Lead network design, implementation, migration, and support activities
• Manage major infrastructure projects, budgets, vendors, and risks
• Ensure high availability, performance, and security of network services
• Drive network automation using Python, Ansible, APIs, and AI technologies
• Oversee incident management, problem resolution, and service improvement
• Develop network standards, architecture roadmap, and operational procedures
• Manage and mentor network engineers and project teams
• Collaborate with business, application, security, and operations stakeholders
• Support regulatory, audit, cybersecurity, and compliance requirements

Requirements:

• Degree in Computer Science, Information Technology, Engineering, Telecommunications, or related discipline
• Minimum 10+ years of experience in network infrastructure engineering and operations, with at least 5 years in a leadership or management role
• Proven experience in designing, implementing, and supporting large-scale enterprise, data centre, and mission-critical network environments
• Strong technical expertise in Layer 2 / Layer 3 Networking, OSPF, BGP, Multicast, VXLAN / EVPN, Firewall technologies, IPS/IDS, DDoS Protection, Network Access Control, DNS, Load Balancing
• Hands-on experience in Network Automation, Infrastructure as Code (IaC), and AIOps technologies using Python, Ansible, APIs, Terraform, PowerShell, and AI-enabled operational platforms
• Proven track record in leading large-scale infrastructure transformation, data centre migration, cloud adoption, and network modernization projects
• Strong project management and stakeholder management skills, capable of leading cross-functional initiatives involving infrastructure, security, application, and business teams
• Extensive vendor management experience, including contract negotiation, service performance management, resource governance, and solution evaluation
• Strong communication and presentation skills, with the ability to engage effectively with various stakeholders
• Experience working in financial services, exchanges, banking, or other highly regulated and mission-critical environments is highly preferred

XML job scraping automation by YubHub

Job Responsibilities:

• Partner with application teams on IT solution configuration and review
• Interact with internal and external parties on planning and execution
• Play a role in incident and problem management, such as impact assessments, troubleshooting, and remediation and prevention
• Compile operation and technical documents, such as knowledge base, technical procedures, and test reports
• Handle BAU processes automation
• Provide production support, including on-call duties when required
• Execute changes in accordance with change management procedures
• Support mission-critical systems with high availability requirements
• Manage patching, vulnerability remediation, and system hardening
• Support audit, regulatory, and internal control requirements
• Coordinate with data centre operations and vendors for infrastructure issues
• Collaborate with the Cyber security/infrastructure engineering and project teams to adopt modern technologies, such as multi-cloud and container orchestration, to enhance manageability

Job Requirements:

• Degree in Computer Science, Information System, or IT-related disciplines
• Minimum 8 years of direct, hands-on RHEL administration experience
• Advanced knowledge of System tuning and troubleshooting
• Familiarity with scripting (Bash)
• Experience with enterprise virtualization and private cloud platforms (e.g., VMware, OpenStack, DCS, HCS)
• Familiarity with Automation practices and tools (Ansible)
• Experience of managing change implementation on large-scale systems
• Good team player with passion to learn and aspirations for career development in the financial industry

XML job scraping automation by YubHub