At Kerry Properties, we commit to employing people who are passionate and dedicated. We look for people who always strive for excellence and possess a positive attitude. In turn, we offer our people boundless opportunities in career advancement and realization of their potential.

Job Highlights

The job function is to provide IT security system administration and IT security related services in an effective and timely basis. It also includes the handling of IT security daily operations such as IT security incident response and execution of IT security related projects. The position may be required to work after-hours or weekends when necessary.

Responsibilities

• Review and maintain IT risk management, facilitate risk analysis, and monitor risk mitigation to ensure effectiveness of remediation steps
• Participate in security monitoring, detecting and analysis of security related events to ensure appropriate cyber defense
• Perform technical security assessment on various devices, e.g. Firewall, IPS/IDS, WAF, Email Gateway, Anti-virus, Router/Switch
• Handle cyber security incident response operation and support; provide documentation of incident investigation, determine its validity and priority
• Perform network, server, and endpoint forensic investigation; handle and investigate spam and malicious email reported by users
• Perform control and vulnerability assessments, assist in compliance monitoring reviews to identify control weaknesses, and recommend remedial actions
• Develop and validate baseline security configurations for information systems, e.g. operating systems, firewall configuration
• Review and assess exception-based security authorization requests; research and evaluate new threats and security alerts with solution recommendation
• Handle and execute security related projects and promote cyber security awareness; assess and manage Disaster Recovery plan
• Coordinate internal or external parties to conduct independent penetration test and vulnerability testing
• Implement IT compliance procedures, practices, and process to maintain a proactive conformance

Requirements

• Degree holder in Information Technology, Computer Science, or related disciplines
• Minimum 5 years' solid IT experience with enterprise or sizable organization including 3 years' experience in IT security and technology risk management
• Solid experiences in IT security technology, e.g. Anti-phishing Simulation, Vulnerability Scanners, SIEM, DLP, Antivirus, WAF, Firewall, IPS/IDS, Anti-DDoS Services, Email Security Gateways
• Strong knowledge on Internet application security, e.g. common Internet application vulnerabilities and network architecture
• Fast paced and result-oriented with capability to drive and work independently and efficiently
• Experiences in project and vendor management
• Holders of CISSP, CEH related qualifications are preferred
• Good command of both written and spoken English and Chinese (Cantonese and Mandarin)
• Result-oriented, able to work under pressure and cope with tight deadlines
• Good team player and willing to share knowledge with team members and business users

The personal data provided will only be used for recruitment and employment-related purposes. All personal data provided will be treated in strict confidence. All applications may be considered for other suitable position(s) in the Kuok/Kerry Group and its subsidiary/ associated companies. For correction of or access to personal data after submission of the application or enquiries on recruitment matters, please contact Human Resources Department by email to [email protected]. Please mark "Confidential: Personal Data Access/ Correction/ Recruitment Enquiries" on your correspondence. Information on unsuccessful candidates will normally be destroyed after 24 months from the date of application. By submitting an application through Kerry Properties' Career webpage, you are deemed to have consented to its Personal Information Collection Statement.