About the role

IT Centre Europe (ITCE) oversees and manages the secure operations of IT applications and front-end systems used in all Bank of China (BOC) branches and representative offices located within Europe and Africa. The IT Risk and Compliance team within ITCE is primarily responsible for managing IT risks and compliance within the ITCE and EMEA institutions. As a Cyber Security Analyst, you will be responsible for managing daily security operations, including continuous threat monitoring, analysis, and incident response. You will conduct risk assessments to identify potential security threats, discover vulnerabilities and weaknesses in security controls, and support the continuous improvement of security controls. You will also manage local security tools and promote new tools that strengthen the Bank’s cyber security. This is a full-time permanent position.

Key responsibilities

• Manage and operate local security devices, systems, and tools in accordance with department’s policies and requirements
• Coordinate and deliver the implementation of new security tools across the ITCE and EMEA regions
• Conduct weekday threat monitoring shifts and participate in an on-call rota covering out-of-hours, weekends, and public holidays as and when required. Monitor, analyse, investigate, and respond to security threats and incidents, performing containment activities where required to minimise risk and support effective incident resolution
• Participate in the security incident response process in ITCE and EMEA branches, and provide support to EMEA branches during incident response period
• Monitor the Head Office intelligence platform, import Indicators of Compromise (IOCs) into local security tools, and support EMEA branches in importing IOCs into their local security tools
• Support the asset management process, including asset discovery, identification, registration, inventory management, and containment activities
• Provide security training to end users
• Prepare security operations MI data and reports for the security tools and domains
• Organise security testing for ITCE’s infrastructure, perform security testing for EMEA branches, and analyse the test findings
• Perform vulnerability assessments and scanning activities across ITCE and EMEA branches
• Develop cybersecurity emergency scenarios and assist to organise cybersecurity rehearsals