Responsibilities

• Develop and maintain Security Operation Services with security technologies and frameworks adoption, security facility and tool deployment 
• Implementation Monitoring and Handling of Information / IT Security Projects from requirements collection to go-live production implementation and on-going monitoring and operation hand-over 
• Implementation, Maintenance, and Operation of Information Security Continuous Monitoring, Security Information Events & Management, End-point & Device Control, Penetration Test tools 
• Develop and maintain the process and procedure of Security Incident Response Management and Handling 
• Perform monitoring, analysis, trend and behaviors analytics of security events and suspicious activities periodically 
• Perform monitoring, handling, communication of security incident occurred 
• Perform Security Incident Drill Test periodically 
• Perform security baseline configuration / vulnerability scans and penetration tests, monitor and tracking the results and remediation 
• Establish Information / IT Security Metric Dashboard practices for all security operations across the organization enterprise 
• Effectively lead indirect resource teams, including contractors and other third-party resources 
• Keep current on new, cutting edge security technology and functionality 
• Make appropriate recommendations on internal IT processes 
• Follow IT internal processes, policies and procedures 

Requirements

• College Degree holder in Computer Science, Electrical/Electronic Engineering or Information Technology related fields a minimum 
• CISSP / SSCP / CEH / CSX / OSCP (or other industry recognized security certification) strongly preferred 
• Minimum of 4 years of relevant experience in Security Operation Center, Project Management, Security Monitoring and Incident Handling, Security Penetration Testing & Red Teaming, Security Procedure writing 
• Experience with Information / IT Security Operation Architecture, Metric Dashboard 
• Experience with Sensitive Data Access & Privilege Activities Monitoring, End-Point Security, SIEM, Security Incident Management & Handling, Cyber Security 
• Experience with applications and associated security risks 
• Experience in vendor management 
• Hospitality or gaming industry experience is preferred 
• Knowledge in information, data, network and cyber security technologies 
• Hospitality or gaming system and infrastructure knowledge is a plus 
• Proficient in spoken and written English 
• Fluent in Cantonese Chinese speaking is preferred 
• Good presentation skill and able to explain technology strategic to non-IT user 
• Possess of good analytical skill and be detail oriented 
• Strong desire to adopt new tools and technologies 
• Excellent problem solving and documentation skills 
• Excellent verbal and written communication skills