• IT Security.
• Security Risk Assessment and Audit.
• IT Security Scanning Tools.
• Vendor Management.

Provide IT security and risk management related support services.

 

Seconded to our clients of public sector to perform the followings:

• Assist in maintaining department IT security policies, standards and guidelines, and monitor their execution status;
• Assist and monitor external security consultants in conducting security risk assessment and audit (SRAA) on systems and in implementing security enhancement projects;
• Perform internal IT SRAA (e.g. system vulnerabilities tests, web application vulnerability tests, system configuration review, general control review, etc.) on department information systems;
• Monitor and support other project teams in implementing the recommendations arising from the SRAAs;
• Handle IT Security incidents and alerts;
• Support various security solutions (e.g. system vulnerability management solution, system security information and event management solution, web application vulnerability scanning solution, privileged password management solution, session recording solution, application whitelisting solution, etc.) implemented by the Treasury; and
• Perform other IT security related duties such as routine intrusion prevention system / firewall logs review.
  
  
  
  
  
  
  
  
  
  
   

• Higher Diploma or Degree holder in Computer Science or related discipline;
• Minimum 6 years post-qualification IT experience with at least 2 years of experience in similar capacity;
• Occasionally require to provide services during non-office hours (Sat, Sun or Public Holidays); and
• Require to provide on-call support services.
  
  
   

Interested parties please send detailed resume with present/expected salary to HR Department.

Address: Room 1202, 12/F, Harcourt House, 39 Gloucester Road, Wanchai, Hong Kong.

Tel: 2838-6813

Fax: 2838-6776

We are an equal opportunity employer and welcome applications from all qualified candidates. Personal data collected will be treated in strictest confidence and handled confidentially by authorized personnel for recruitment-related purposes within the Group. Applicants not hearing from us within six weeks from the date of advertisement may consider their applications unsuccessful.