Department:
DPO

Job nature:
(T26) Enhancement of cybersecurity measures and improvement of the IT infrastructure's security posture in the DPO.

Responsibilities:
(T26)
1. Administer and coordinate with B/Ds and external vendors to support the security assessment of government information systems
2. Leverage various tools and cybersecurity sources, including ASM and other channels, to identify and analyse vulnerabilities and threats of government information systems, and conduct research on remediation strategies for affected systems
3. Liaison and disseminate security vulnerabilities and findings of government information systems with B/Ds to remediate the risks
4. Generate regular reports and monitor trends related to the overall security posture of the government.
5. Support the daily operation of the ticketing system, including the distribution of tickets and handling of other daily requests and enquiries
6. Troubleshoot and resolve technical issues related to hardware, software and network problems in servers, systems and government cloud infrastructures
7. Perform system migration when necessary, including planning, coordination, data migration, testing, cutover and post-migration support to ensure minimal disruption and continuity of services
8. Support incident response, analysis and threat hunting in DPO information systems
9. Support daily operations, draft and issue security reminders to alert B/Ds to the latest trends, and promote cybersecurity awareness
10. Assist in engaging with potential vendors, evaluate and integrate innovative technologies into the DPO environment, and ensure the stability and usability of existing systems
11. Perform any other duties as assigned by the supervisor.

Requirements:
1. Possess solid experience in security assessment, vulnerability management and follow-up remediation of security findings with stakeholders
2. Possess solid experience in using security tools and platforms (e.g. ASM, penetration testing tools or equivalent) to identify and analyse vulnerabilities and threats
3. Possess solid experience in supporting ticketing systems or other IT Service Management System.
4. Possess solid experience in handling requests and enquiries as Helpdesk
5. Possess solid experience in system migration activities (e.g. planning, coordination and cutover support) would be an advantage
6. Possess solid experience in in security monitoring, incident response and threat hunting
7. Have experience in application and infrastructure products and technologies (e.g. servers, storage, cloud, network, hypervisors, backup and operating systems) would be an advantage
8. Have experience in organising security awareness activities would be an advantage
9. Good command of English and Chinese languages; and
10. Strong communication and interpersonal skills.

Technical skills:
Information Security Management (36)
Infrastructure (24)
IT Application Development and Management (48)
IT Security (36)
IT Security Scanning Tools (36)
Network & System Management (24)
Security Incident Detection and Handling (36)
Server Virtualisation Technology (24)
System Implementation and Maintenance/Support (36)