Department:
LCSD

Job nature:
(T26) - Conduct various IT security activities - Provide support to various security review exercises (e.g. internal reviews, security risk assessment, security audit and privacy impact assessments) - Provide support to IT security enhancement project

Responsibilities:
(T26) - Liaise with system owners, IT support staff and contractors for requirements study, implementation of IT security review and enhancement activities - Assist in planning, drafting and conducting internal security review exercises - Assist in planning, evaluation, management and acceptance of contractor deliverables (e.g. plans, documents, reports etc.) for various security review exercises - Track project progress, monitor milestones and escalate issues to ensure on-time delivery. - Undertake any duties as assigned by supervisor and work overtime or after office hour when needed.

Requirements:
- University Degree Holder or equivalent - Proficient in both spoken and written English and Cantonese - At least 3 years solid IT working experiences in implementation of IT project, production support and programming - At least 1 year working experience in IT security activities - Working experience in security incident detection and response is preferable - Working experience in managing web application firewalls is preferable - Working experience in IT security scanning tools is preferable - Working experience in arranging / conducting IT Security Assessment and Audit exercise is preferable - Working experience in Server Virtualisation Technology, Windows Server and Linux System Administration is preferable - Holder of Information Technology Infrastructure Library (ITIL), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Information Security Professional (CISP), Offensive Security Certified Professional (OSCP) is preferable

Technical skills:
IT Security (12)