The Job

• Lead information security project implementation and supervise external IT vendor, system integrator or consultant to complete projects on schedule and within budget.
• Manage information security systems and services to ensure compliance with HKHS internal policy, standard, ISO/IEC 20000/27001, regulatory or government requirements.
• Perform risk assessments and arrange penetration test or security compliance audits on existing IT systems or new projects to identify potential security risks and non-compliance issues.
• Identify latest security threats and recommend appropriate cyber security technology or solutions for HKHS.
• Support the team to have a customer focused and innovative mindset to carry out their respective functions. Coach and provide technical guidance to less experienced peers.
• Perform other ad-hoc tasks when required.

The Person

• 8 years’ work experience in IT, and at least 5 years in information security in corporate or sizeable organization.
• Extensive experiences in design and implementation of various information security solutions, such as firewall, Extended Detection and Response (XDR), Secure Access Service Edge (SASE), cloud security posture management (CSPM), as well as IoT and application security (DevSecOps).
• Experiences in IT/security framework (e.g. ISO/IEC 20000, 27001) implementation.
• Familiar with IT Security Guidelines and Practice Guides published by Digital Policy Office (DPO) of HKSAR Government.
• Hold at least one professional information security certifications, such as CISSP, CISM, or CCSP.
• Good written and communication skills in English and Chinese.
• A self-motivator who has “can-do” attitude and growth mindset.
• Proven track record in managing large scale security projects with ability to deliver on time and budget.
• Well organised and able to prioritise and complete tasks efficiently.
• Capable to define functional and/or technical specifications for external IT consultants, vendors or service providers to deliver solutions.