Job Responsibilities: 

• Assist with planning, implementation, performance and improvement of the Cyber Security framework. In tangible terms includes updating policies, processes, reports, investigations, managing security incidents to ensure that resolved in a timely and effective manner, as well as undertaking remedial actions
• Support the implementation and management of the organisation’s network security infrastructure, including firewalls, web filtering, network access controls, data loss prevention and endpoint protection
• Identify new technologies that can aid the organisation's information protection programme; and review, test and determine true value and practicality of these proposed technologies
• Prepare regular updates for management, to ensure that they have a clear understanding of key security risks
• Engage with business units to identify and manage their information protection requirements
• Deliver in partnership with the organisation’s training function, regular briefings on information/cyber security and data protection best practice

Job Requirements:

• Minimum 5 years relevant working experience in Information/ Cyber Security
• Bachelor’s degree (preferred but not essential) or equivalent experience in computer science, IT engineering, or related field. An MSc Information Security or equivalent would be an advantage
• Information Security and/or Information Technology industry certification (CCIE/ CCNP/ CWNA/ CISSP/ CISA) is a must. CCNA certification is preferable
• Experience in application testing, conducting penetration tests, code scanning and/or container security
• A solid understanding of TCP/IP protocol suite, network IT subnetting, switching and routing and OSI model
• Ability to communicate across a range of stakeholders including senior management
• A sense of urgency, ownership, as well as the ability to navigate cross-functionally
• Analytical skills, and the ability to clearly identify key issues
• Fluent in English (written and spoken), Cantonese or Mandarin an advantage
• Candidates with less relevant experience and/or lower qualifications may be considered for the position of Information Security Administrator.