Duties

The appointee will be a member of the IT Security Team within the Network, Cyber Security & Access Control Services Section. Responsibilities include:
(a) Providing technical advice and consultancy on cyber security measures and controls to various development teams across the University.
(b) Coordinating and conducting security assessments for information systems to ensure compliance with established security policies, along with recommending remediation for any non-compliance issues.
(c) Managing and investigating cyber security incidents and events to safeguard the University's IT assets.
(d) Conducting research on emerging technologies in cyber security and offering technical recommendations and best practices for management consideration.
(e) Organizing and delivering information security awareness training programs for staff and students.
(f) Collaborating on application and infrastructure development projects to ensure adequate security measures are in place while meeting business needs.
(g) Providing after-hours standby and emergency support as needed.
(h) Performing any other duties as assigned by the Director of the Office or their delegates.

Qualifications

Applicants should:
(a) Hold a recognized degree in Computer Science, Information Technology, or a related field.
(b) Preferably have two years of relevant experience in cyber security consultancy and IT security risk assessment for large organizations.
(c) Be proficient in managing the vulnerability management process, including report consolidation, solution recommendations, exception handling, and pen-test coordination.
(d) Have extensive experience using various security scanning tools for technical assessments.
(e) Demonstrate proven experience in delivering training on cyber security topics and conducting policy reviews.
(f) Exhibit proficient communication skills along with strong analytical and problem-solving abilities.
(g) Be capable of working independently as well as collaboratively within a team.
(h) Be proactive and able to perform effectively under pressure.
(i) Be fluent in both written and spoken English and Chinese.

All applications applied through our system will be delivered directly to the advertiser and privacy of personal data of the applicant will be ensured with security.