Department:
EDB

Job nature:
(T26) Maintaining and Support MS Active Directory, IT Systems and Websites of the EDB

Responsibilities:
(T26) - Maintain and support Active Directory Domain Services, ensuring system reliability and security. - Manage and coordinate system vulnerability scanning, including the use of scanning tools, review of scan reports, and facilitation of remediation processes. - Lead project management initiatives to coordinate actions between system owners, system support teams, and external service providers. - Conduct regular system assessments and audits in accordance with established security policies and guidelines. - Coordinate Windows migration exercises, ensuring seamless transition and minimal disruption to operations. - Schedule audit timelines based on responses from system owners or support teams, ensuring timely completion of audits. - Gather essential information for audit purposes and assist in drafting work assignment briefs. - Review scan reports to identify true security risks and filter out false alarms. - Liaise with cross-functional teams to drive continuous improvement in system security and operational efficiency. - Prepare and present clear, concise reports and documentation for management

Requirements:
- Bachelor's degree in Computer Science, Information Technology, or a related discipline. - Minimum of 5 years of relevant experience in system analysis, IT infrastructure, or security operations. - Hands-on experience with Active Directory Domain Services administration and troubleshooting. - Proven experience in vulnerability management, including static and dynamic application security testing tools, and remediation processes. - Understanding of infrastructure and web application vulnerabilities. - Ability to review scan reports to find true security risks and filter out false alarms. - Knowledge of government security policies and guidelines is an advantage. Non-Technical Requirement: - Strong project management skills, with the ability to manage multiple tasks and stakeholders simultaneously. - Excellent communication and coordination skills in English and Chinese (Cantonese preferred). - Ability to prepare and present clear, concise reports and documentation for management and audit purposes. - Strong interpersonal skills to liaise with cross-functional teams and drive continuous improvement in system security and operational efficiency. - Experience in scheduling audit timelines on servers, networks, and applications based on stakeholder feedback, latest security policies, and guidelines, and drafting work assignment briefs.

Technical skills:
IT Security (36)
Microsoft Active Directory Administration (36)
Security Risk Assessment and Audit (36)