In support of the Government’s Job Creation Scheme under the Anti-epidemic Fund, we are now inviting applications for the following position under a one-year fixed-term contract:

You will be responsible for:

• assisting the IT Security Manager to drive and align policy compliance across the Authority;
• ensuring all IT assets and applications are configured, latest security patched, scanned for vulnerabilities and operating per Authority’s standards;
• co-ordinating and running regular security awareness programs (such as Phishing Campaign and Cybersecurity Training) to raise user awareness on Cybersecurity domain;
• monitoring, assessing and auditing behaviour practice and compliance across the Authority;
• managing external Security Operation Centre (SOC) service providers and deliverables;
• coordinating with Security Manager as internal escalation point for incidents and response coordination;
• evaluating and implementing new technology solutions to mitigate potential cybersecurity risks and strengthen the security controls;
• evaluating, adopting and enforcing cloud security best practices to the Authority’s cloud platforms;
• operating and supporting different IT security solutions such as Web Application Firewall (WAF), Certificate Authority (CA), Cloud Access Security Broker (CASB), Security Information and Event Management (SIEM), Data Leakage Protection (DLP), Next-Generation Firewall (NGFW), Intrusion Detection/Prevention System (IDS/IPS), Privilege Account Management (PAM), Identity Access Management (PIM), End-Point Protection, Azure Active Directory Security, Microsoft Office 365 Security.

You should:

• possess a recognized university degree in Computer Science, Information Security, or relevant discipline;
• have good written and verbal communication skills, good interpersonal and collaborative skills, and the ability to communicate information security and risk-related concepts with technical and business audiences;
• have a minimum of 1 to 2 years technical experience in information security, security operations, security program and / or project management;
• holder of certified CISSP, CCSP, CISM, CISA, CRISC, Cloud Architecture and Security (AWS or Azure), or other similar credentials is preferred;
• have knowledge in information security risk management, cybersecurity technologies, technology risks (including infrastructure security, cloud security, and application security), and managed SOC services is an added advantage;
• have hands-on security assessment and implementation experience on cloud platforms, including Microsoft 365, Azure and AWS public cloud platforms;
• have good fundamentals on infrastructure support, application development, and/or cloud platforms;
• have the resilience, drive and perseverance in gathering information, working with the business and progressing the technology and compliance mandates through the Authority.

For interested parties, please submit your application with detailed CV on or before 9 September 2022. Applicants are encouraged to submit their applications as soon as possible. The review of applications will continue until post is filled.

Data collected will only be used for job application processing. Your data may be accessed by our appointed recruitment consultants who have agreed to keep confidence of all personal data in not less than the standards applicable to us. Applicants not being invited for interview within 4 weeks from the submission date may assume their applications unsuccessful.

All related information will be kept up to 24 months and all personal data will be destroyed afterwards.

For more information

http://www.westkowloon.hk or contact

Ms. Kelly Wan at 2200 3787