Responsibilities

• Formulation and maintenance of security standards and procedures 
• Perform to conduct Information / IT Security Acceptance Test and Security Exposure Risk Assessment for new project deployment or major change of application / infrastructure systems 
• Perform to implement, and enforce Information / IT security policies, standards, procedures 
• Perform to conduct User Account and Access Review Certification and Reporting regularly for the departments to verify the user account IDs and access privilege accuracy 
• Perform security baseline configuration / vulnerability scans and penetration tests, monitor and tracking the results and remediation 
• Keep current on new, cutting edge security technology and functionality 
• Make appropriate recommendations on internal IT processes 
• Follow IT internal processes, policies and procedures 

Requirements

• College Degree holder in Computer Science, Electrical/Electronic Engineering or Information Technology related fields a minimum 
• CISSP / CISA / ISO27001 / CSX (or other industry recognized security certification) strongly preferred 
• Minimum of 2 years of relevant experience in Information / IT Security Management, Project Management, Security Controls Implementation, Security Standard / Procedure / Guideline writing 
• Experience with Security Acceptance Test and Security Exposure Risk Assessment 
• Experience with Privilege ID & Identity & Access Governance, Key Management, End-Point Security, Security Scanning, Penetration Test, Cyber Security Assurance 
• Experience in assessment of security controls, application security, security exposure risk, network segmentation, network perimeter defense 
• Experience with applications and associated security risks 
• Experience in vendor management 
• Hospitality or gaming industry experience is preferred 
• Knowledge in information, data, network and cyber security technologies 
• Hospitality or gaming system and infrastructure knowledge is a plus 
• Proficient in spoken and written English 
• Fluent in Cantonese Chinese speaking is preferred 
• Good presentation skill and able to explain technology strategic to non-IT user 
• Possess of good analytical skill and be detail oriented 
• Strong desire to adopt new tools and technologies 
• Excellent problem solving and documentation skills