Project Nature:

• Support the overall management of mission critical IT systems in accordance with the government IT security policies and guidelines;
• Assist in the IT Security Management Team (ITSMT) in discharging duties in security risk assessment and audit and IT security management.

Duties:

• Serve a contract assignment under InfoTech's headcount, full-time second to serve the Environmental Protection Department;
• Assist in developing, establishing and maintaining the overall IT security strategy and roadmap for EEB(EB) and EPD including formulating and reviewing IT security policies, baselines, standards and directives, etc.;
• Perform in the ITSMT in assisting Contract Project Manager (CPM) in monitoring and coordinating of IT security matters in EEB(EB) and EPD;
• Assist in reviewing, formulating and Implementing IT security policies and guidelines in EEB(EB) and EPD to ensure all IT activities performed in accordance with the required IT security protocols and requirements of DPO;
• Assist in planning, managing and monitoring the progress of IT security projects, security risk assessment and audit projects, measures and controls against cyber-attacks and data leakage;
• Assist in overseeing IT security threat, risk management activities, security compliance audits, disaster recovery and business continuity planning functions related to IT security;
• Support cyber and data security reviews on the IT systems;
• Attend to cyber and data security alerts and provide timely advice to project teams and users;
• Support the arrangement of cyber and data security awareness trainings to users;
• Keep abreast of development and application of new IT technologies and best practices relating to cyber security and data security;
• Assist in the provision of strategic advice on IT security matters to users;
• Troubleshoot all technical problems encountered by users during their applications of IT devices on IT security perspectives and to assess end-user devices for identifying associated risks of IT security vulnerabilities;
• Support and advise on procurement of IT systems and devices on IT security management;
• Carry out any other duties as directed.

Requirements: 

• Degree in Information Technology or equivalent;
• Recent IT working experience in Government;
• Obtained one of the following certificates relating to IT security will be an advantage:
• Certified Information Security Professional (CISP) from China Information Technology Security Evaluation Centre (CNITSEC);
• Certified Information Security Member from CNITSEC (CISM-CNITSEC);
• Certified Information Systems Security Professional (CISSP) from International Information System Security Certification Consortium (ISC);
• Certified Information Systems Auditor (CISA) from Information Systems Audit and Control Association (ISACA);
• Certified Information Security Manager from ISACA (CISM-ISACA).
• ISO/IEC 27001 Lead Auditor from International Organization for Standardization (ISO) and International Electrotechnical Commission (IEC);
• Global Information Assurance Certification (GIAC) Security Expert (GSE) from SANS Institute;
• Certified Ethical Hacker (CEH) from International Council of Electronic Commerce Consultants (EC-Council);
• At least 2 years' experience in Intruder Detection/Alert Technology, IT Security, Security Risk Assessment and Audit (SRAA);
• Knowledge of endpoint security solutions is an advantage;
• Knowledge of network and system management is an advantage;
• At least 3 years' experience in work with the Government, management and support of Government systems and services and managing Government IT standards (ITG);
• Knowledge of IT procurement is an advantage;
• Knowledge of vendor management is an advantage;
• At least 4 years' post-qualification experience in which at least 1 year's relevant experience in a similar post and in a comparable capacity.

Original JD
Application: [via CTgoodjobs Apply Now]
Direct Line for this post: (852) 3978 8032