• IT Application Development and Management.
• Internet/ Intranet.
• IT Security.
• Wireless and Mobile.
• IT in Community, eg. Promote Use of IT/ IT Awareness.

 Support to security team.

Seconded to our clients of public sector to perform the followings:

• Conduct security assessment for new application or major enhancements of existing application.
      - Understand the application functions and data flow.
      - Verify the security controls of the application.
      - Ensure the compliance with security requirement.
• Review server hardening and vulnerability scanning report.
      - Understand the finding identified in the report, the associated risk and how to mitigate the risk.  
      - Review and confirm the mitigation measure can address the risk.
• Work with vendor to coordinate the ISO20000 certification exercise. 
      - Arrange briefing to in-scope teams.
      - Schedule the audit, reserve meeting room and support the logistic of audit interview.
      - Preparing to answer auditor's question in the audit.

• Degree holder in Computer Science or related discipline;
• Minimum 6 years post-qualification IT experience with at least 4 years of experience in similar capacity;
• Familiar with security requirement and have knowledge in application development.
• Have knowledge in hardening of operation system and common vulnerability of web application.
• Understand application development life cycle.
• Familiar with ISO20000 requirement is preferrable.
• Possess professional security qualification (e.g. Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) and Certified Information Security Professional (CISP)) is preferrable.

Interested parties please send detailed resume with present/expected salary to HR Department.

Address: Room 1202, 12/F, Harcourt House, 39 Gloucester Road, Wanchai, Hong Kong.

Tel: 2838-6813

Fax: 2838-6776

We are an equal opportunity employer and welcome applications from all qualified candidates. Personal data collected will be treated in strictest confidence and handled confidentially by authorized personnel for recruitment-related purposes within the Group. Applicants not hearing from us within six weeks from the date of advertisement may consider their applications unsuccessful.