Contract Systems Analyst - IT Security, CISA, CISSP, CISP (C34401)

Information Technology • Contract / Project Based • Admiralty, Hong Kong, HK • HK$ 55,000 - HK$ 70,000 / month • 2d ago

Project Nature:

IT projects and on-going support for a statutory body, Auxiliary Medical Service (AMS) and Civil Aid Service (CAS) on IT security related matters.

Duties:

Serve a contract assignment under InfoTech's headcount, full-time second to serve a statutory body. The appointed staff is required to work in the following areas:

Enhance, support and monitor suspicious events of IT security infrastructure including but not limited to end-point protection solution, end-point / network detection and response system (EDR/NDR), web application firewall (WAF), privileged account management system (PAM), centralised log management system, security information and event management system (SIEM), mobile device management system (MDM), web filtering system, patch management system, etc.;
Manage the security aspects of network infrastructure including network appliances and firewalls;
Manage security matters including configuration and hardening of servers and network appliances, recommend on application / program hardening;
Serve as security administrator in IT security organisations including the Information Security Steering Committee and IT Security Management Unit to provide updates on all IT security related matters;
Spell out, monitor and ensure necessary technical IT security controls are in place and functional throughout system development life-cycle and on-going system operations, in particular in the areas of access control, operations security, system acquisition / development / maintenance, business continuity, etc. Assist in user acceptance planning and execution in IT security perspectives. Ensure quality procedures, techniques and tools are used;
Review system development project deliverables, documentation and operating procedures, identify IT security shortfalls and recommend improvements;
Review and update the departmental IT security policies and guidelines according to the latest changes in Government-wide baseline or ad hoc circulars, and provide recommendations to plug the compliance gaps;
Coordinate application and infrastructure teams to produce and maintain IT security related system documentation including capacity management plan, up-to-date hardware and software list, configuration and network diagrams, etc.;
Monitor software end-of-support, produce migration plan, and ensure on-time completion of associated measures;
Identify new threats and known vulnerabilities, perform risk assessments to determine mitigation approach, update security risk register, ensure on-time completion of mitigation measures and reporting to supervisory bodies;
Conduct in-house IT security risk assessment and IT security awareness training, managing IT security risk assessment and audit (SRAA) exercises, privacy impact assessments (PIA), as well as compliance audit/check by external parties;
Provide first-line support for security incidents and coordinate disaster recovery drills and security incident drills;
Assist in procurement, setup, maintenance and support of IT equipment and services underpinning the security tools;
Provide technical advices to support latest IT security and business requirements;
Engage and collaborate with stakeholders to meet business objectives;
Carry out other technical and administrative duties assigned by the supervisor.
On-site or remote support out of office hours is required when necessary, which will be compensated by time-off in lieu.

Requirements:

The appointed staff should have:

Degree in computer subjects or related disciplines;
At least one of the industry-recognised IT security certifications (e.g. CISA, CISSP, CISP, etc.)
Hands-on experience in technical support for IT security infrastructure and network equipment (e.g. Cisco, H3C, Huawei, etc.);
Hands-on experience in IT security design, implementation and operations in application system development projects, preferably using the Government Cloud Infrastructure Services (GCIS);
Experience in the technology and security risks of cloud-native applications running in a virtualised and/or containerized environment;
Experience in compliance of government IT security policies and guidelines (e.g. S17, G3, SRAA, PIA), preferably for Tier 2 or Tier 3 systems;
Good command of written and spoken English and Chinese;
Good communication skills and customer service skills;
Independent, self-motivated and good sense of responsibility; and
Pleasant personality and good interpersonal skills.
The appointed staff will work mainly in Admiralty, Yau Ma Tei and Ho Man Tin, and may need to work in Wanchai, North Point, Kwun Tong, Cheung Sha Wan, Kowloon Bay and Sha Tau Kok when necessary.

Technical Skills:

At least 4 years' experience in IT Security;
At least 3 years' experience in Network & System Management;
At least 3 years' experience in Anti-Virus Technology;
At least 2 years' experience in Intruder Detection/Alert Technology;
At least 2 years' experience in Security Risk Assessment and Audit;
At least 2 years' experience in Security Incident Detection and Handling;
At least 2 years' experience in IT Security Scanning Tools;
At least 1 year's experience in Endpoint Security Solutions;
1 year's experience in Anti-Spam Technology is an advantage;
1 year's experience in CISCO IOS Software & CISCO Products is an advantage;
1 year's experience in Intrusion Prevention System is an advantage;
1 year's experience in PC LAN Support is an advantage.

Non-technical Skills:

At least 2 years' experience in customer service;
At least 2 years' experience in IT audit;
At least 1 year's experience in managing corporate IT security framework;
At least 1 year's experience in work with the Government;
1 year's experience in managing Government IT standards is an advantage.

Bachelor's degree/Higher Diploma in Computer Science, IT or equivalent;

At least 6 years' post-qualification experience in which at least 3 years' relevant experience in a similar post and in a comparable capacity.

Original JD

Application: [via CTgoodjobs Apply Now]

Direct Line for this post: (852) 3978 8032

Similar Jobs

電腦及電子技術員 - BMS 樓宇管理系統 (中上環)

Information Technology • Full Time • Admiralty, Hong Kong, HK • 6d ago

Information Technology Full Time

工作內容：負責BMS系統的工程工作 (樓宇管理系統、物聯網設備、網絡系統等)。處理數據核對、電腦系統安裝、檢修系統故障。工作時間：星期一至六，早上9時至下午6時工作地區：中上環晉升機會：技術員 -> 高級技術員 -> 管工 /...

6d ago

Apply

PMO Senior Manager - Enterprise Programme

Information Technology • Full Time • Admiralty, Hong Kong, HK • 3w ago

Information Technology Full Time

The PMO Senior Manager will establish and govern the Project Management Office for enterprise transformation and strategic change initiatives. This role ensures project delivery excellence through robust governance, port...

3w ago

Apply

I.T. SUPPORT OFFICER / PROGRAMMER / ANAL PROG / SYSTEM ANALYST / I.T. MANAGER

Information Technology • Full Time • Admiralty, Hong Kong, HK • HK$ 15,000 - HK$ 60,000 / month • 3w ago

Information Technology Full Time

Diploma in Computer or I.T. - 2-8 yrs relevant experience in either one of below: 1) I.T. Support / I.T. Officer / System Administrator / Network Engineer / I.T. Manager with: a) Good exposure in Hardware / Software Supp...

3w ago

Apply

Librarian 圖書館主任

Government / Public Sector • Full Time • Admiralty, Hong Kong, HK • 3d ago

Government / Public Sector Full Time

Main duties The main duties of a Librarian include: (a) supporting the development of the Library and delivering information and reference services to meet the needs of LegCo Members and Secretariat staff; (b) implement...

3d ago

Apply

Librarian 圖書館主任

Others (General Work, Labour etc.) • Full Time • Admiralty, Hong Kong, HK • 3d ago

Others (General Work, Labour etc.) Full Time

3d ago

Apply

Council Researcher 議會研究主任

Government / Public Sector • Full Time • Admiralty, Hong Kong, HK • 3d ago

Government / Public Sector Full Time

Main duties The main duties of a Council Researcher include: (a) conducting policy research and analysis for LegCo, its committees and Members; (b) monitoring developments on issues of public interest and preparing bilin...

3d ago

Apply

Insurance Brokerage Responsible Officer

Insurance • Full Time • Admiralty, Hong Kong, HK • 3d ago

Insurance Full Time

Insurance Brokerage Responsible Officer Internal Reference: R080-250730-001 Recruiting Entity: Insurance Broker Recruiting Position: Insurance Brokerage Responsible Officer Level: Senior Level ** * * * * * * * * * * * *...

3d ago

Apply

Waiter/Waitress

Hotel / Catering / Club • Full Time • Admiralty, Hong Kong, HK • 3d ago

Hotel / Catering / Club Full Time

- Work together with other team members in executing daily operations - Provide genuine good hospitality with staff and customers - Ensure overall organization and cleanliness of workspace as well as personal hygiene - C...

3d ago

Apply

Contracts Manager

Professional Services • Contract / Project Based • Admiralty, Hong Kong, HK • 3d ago

Professional Services Contract / Project Based

Responsibilities: Ensure contract compliance; Assist to check/prepare Conditions Precedent (CPs) and Conditions Subsequent (CSs) and ensure that delivery of aircraft takes place in compliance with agreements. (e.g. deliv...

3d ago

Apply

Assistant Company Secretarial Manager

Professional Services • Full Time • Admiralty, Hong Kong, HK • 4d ago

Professional Services Full Time

Responsibilities: Provide full spectrum of company secretarial duties to the Group of companies in compliance with corporate governance, listing rules and other local statutory rules, laws and regulations; All company se...

4d ago

Apply