The Job

• Lead information security project implementation and supervise external IT vendor, system integrator or consultant to complete projects on schedule and within budget.
• Perform risk assessment on IT systems or projects to identify potential security weaknesses and non-compliance issues.
• Manage information security systems and services to ensure compliance with HKHS internal policy, standard, ISO/IEC 20000/27001, and regulatory requirements.
• Assist direct line manager to establish policies, standards and procedures and guidelines of information security services being provided to HKHS.
• Responsible for information security incident handling and developing preventive measures.
• Identify latest security threats and recommend appropriate cyber security technology or solutions for HKHS.
• Support the team to have a customer focused and innovative mindset to carry out their respective functions. Coach and provide technical guidance to less experienced peers.
• Perform other ad-hoc tasks when required.

The Person

• Degree holder in Computer Science or related discipline with relevant qualification in information security would be preferred.
• 8 years’ work experience in IT, and at least 5 years in information security in corporate or sizeable organization.
• Extensive experiences in design and implementation of various information security solutions, such as firewall, Secure Access Service Edge (SASE), cloud security posture management (CSPM), as well as IoT and application security (DevSecOps).
• Experiences in IT/security framework (e.g. ISO/IEC 20000, 27001) implementation.
• Hold at least one professional information security certifications, such as CISSP, CISM, or CCSP.
• Data analytical and/or programming skills for process automation will be an advantage.