Responsibilities:
 

• Design and implement infrastructure and information security projects including APT solution, SIEM, security training, vulnerability and patch management, privilege account management, NAC, UEBA, WAF, NG firewall, IPS, DLP, secured web proxy, DR site, anti-virus and anti-malware, VPN…etc. and administer, maintain and support the above platforms and solutions upon completion of implementation

• Lead and provide support to internal and external infrastructure requests and incidents. Proactively follow through the entire handling and support processes

• Establish and enrich IT infrastructure and security policies, standards, procedures and guidelines with up-to-date industry standard. Review and identify IT infrastructure and security risk and recommend improvement resolution

• Design, develop and enrich infrastructure contingency plan. Lead and execute the relevant drills as according to the plan regularly

• Plan, coordinate and conduct IT audit, regular risk assessments and test solely or with external parties. Proactively follow-up the result and recommendation to advise proper resolutions

• Plan, coordinate and conduct regular employee infrastructure and security training

• Research on new information technology and perform product evaluation with vendors

• Provide day-to-day maintenance and support on general infrastructure areas as well

Requirements:

•  Bachelor degree in Information Technology, Computer Science or related disciplines
• Minimum 5 years practical experience in IT infrastructure.
• Candidates with IT security expereince such as in-house IT security officer, SOC analyst/operator or IT secrity consultant companies will be an added advantage
• IT security certification holder such as CISSP or equivalent is added advantage
• Hands on experience in IT infrastruture project management and IT security assessment is preferable
• Working experience in FSI sector is added advantage
• Sound knowledge of Spluck Enterprise Security is added advantage
• Knowledge in IT Security industrial standard such as ISO27001
• Knowledge of Information Security best practice, such as PCIDSS or Secure SDLC
• Exposure to different IT security vendor products
• Proficiency level for infrastructure administration e.g. firewall, IPS, VPN, APT protection, anti-virus and malware, Windows and Linux, Spluck, VMWare, SAN...etc
• Experience in using issue tracking system
• Good analytical mind, problem solving and communication skills
• Team player, responsible, independent, self-starter, motivated, multitasking and able to take initiative to get projects completed
• Good command of written and spoken English and Chinese with fluency in Mandarin; knowledge of Simplified Chinese a plus

Application:

We offer an attractive remuneration package including a performance bonus, medical insurance covering dependants, MPF, Life and AD&D insurance, annual leave, birthday leave, marriage leave and training subsidy, etc. to the right candidate. 

If you are interested in this opportunity, please send your application with a detailed resume including current and expected salary, latest bonus and availability by clicking "Apply Now". Applications without required information will NOT be considered.

*Information provided by applicants will be treated in the strictest confidence and will be solely used for recruitment purposes.