Job Description:

• Provide security consultancy service to various IT projects and initiatives
• Enhance security automation process
• Perform security risk assessment and review for security alert / incident/infrastructure/system architecture
• Monitor security alert and news from different sources of threat intelligence
• Manage Penetration test done by external security consultant 
• Conduct analysis on security events and support the responses of security incidents.

Requirement Details:

• Higher Diploma or above in IT
• At least 6 years or above experience in IT field 
• At least 3 year experience in one or more of the following aspects:
• Information System Policy, Standard and Framework
• Cyber security, risk management or data privacy compliance
• IT operation
• Certifications in information security (e.g. CISM, CISA, CISSP, ITIL, etc) are preferred
• Experience in IT audits, cyber security assessments such as Security Risk Assessment and Audit, Privacy Impact Assessment and Privacy Compliance Audit would be an advantage
• Experience in working with accredited certification body would be an advantage
• Good command in spoken Cantonese and English, as well as written Chinese and English
• Good communication and interpersonal skills