Systems Analyst

• Excellent command of spoken and written English and Chinese with knowledge of Putonghua is an advantage

• Assist the Manager / Assistant Manager to manage and implement of the cybersecurity projects including solution design, procurement process, documentation preparation, contractor management, solution delivery, stakeholder engagement etc.

• Manage the integration of a new system with other existing security systems to maximize the capability of total security solutions.

• Work with vendors and ITD teams to integrate the security systems with other IT systems.

• Implement control measures for maintaining security posture for maximizing protection for endpoints and network.

• Support the operations of cybersecurity systems and infrastructure of the Authority.

• Act as first-line support on security operation and incident response, including information gathering, log analysis, stakeholder engagement.

• Collaborate with IT operations, infrastructure and systems technical leads, and security and technology vendors to respond in an accurate and swift manner when facing cyberattacks

• Maintain up-to-date policies, standards and guidelines on cybersecurity of the Authority and enforce the compliance of the security requirements and alignment of IT & security policies.

• Identify security risks and exposures by participating in security reviews, evaluations and risk assessments.

• Investigate any cyberattacks or violations of security incidents and assist on handling security related

This is a fixed-term contract position of minimum 2 years with possibility for renewal subject to organization need and individual performance.

• Degree holder in Information Technology, Computer Science or related disciplines with at least 3 years of IT work experience, of which at least 1 year in IT Security/Cybersecurity

• Solid experience and knowledge in information security management involving private/public/hybrid cloud, virtualization, databases, web, mobile applications and systems.

• Proven experience in security operations, threat hunting and incident response in critical infrastructure companies or large-scale organizations is an advantage.

• Hands-on working experience in managing cybersecurity solutions, e.g. NDR, DLP, EDR/AV, SASE, SIEM, SOAR, ASM, etc.

• In-depth knowledge of Windows and Linux operating systems, private/public/hybrid cloud, virtualization, database, web and mobile applications.

• Strong knowledge in cybersecurity technologies, threat intelligence, network, platform and application security.

• Professional certifications in Information Security, Risk Management (i.e. CC, CISSP, CISA, CISM, CEH, CRISC etc.) is preferred

• Proactive, problem-solving mindset with the ability to work under pressure