Analyst, IT Security, IT

CITIC CLSA; Hong Kong; On-site; HKD 280,000 - 520,000; Full time

Job summary

CITIC CLSA seeks a cybersecurity IAM professional to coordinate awareness activities and support SailPoint IdentityIQ processes. You will work with business and IT teams to drive improvements in identity management and access governance.

The role covers joiner/mover/leaver lifecycle, UAT support, and documentation maintenance, requiring strong English, project skills, and a proactive, team-oriented mindset.

Qualifications

• Bachelor’s degree in computer science, engineering or related domain discipline required.
• 2 to 4 years of experience in IT domains.
• Ability to manage IT projects and stakeholders.
• Basic understanding of identity lifecycle processes (JML).
• Familiarity with access requests, approvals, access reviews, and user provisioning.
• Awareness of access control principles including least privilege and SoD.
• Strong interpersonal, organizational, problem-solving, and project management skills.
• Independent, detail-oriented, proactive, and team player.
• Excellent command of English (spoken and written).
• Assertive yet calm personality.

Responsibilities

• Coordinate cybersecurity awareness activities, planning and delivering training and phishing simulations.
• Work with business and IT teams to understand requirements and support security and identity management improvements.
• Support SailPoint IdentityIQ activities, including access requests, approvals, access reviews, and identity data checks.
• Assist with identity lifecycle processes (joiner, mover, leaver).
• Gather, document, and validate business requirements for IAM changes.
• Support UAT by preparing test scenarios, recording results, tracking issues, and coordinating retests.
• Maintain IAM process documentation, user guides, procedures, and records.
• Coordinate with application and business owners to follow up on access review actions and overdue items.
• Assist with audit and compliance requests by gathering IAM evidence and tracking remediation actions.
• Monitor and report IAM and security awareness activities, identify gaps, and recommend improvements.

Skills

Attention to details

Project management

Stakeholder management

Communication skills

Team player

Independent worker

Problem-solving

Fluent English

Education

Bachelor's degree in CS/Engineering

Tools

SailPoint IdentityIQ

Job description

Key Areas of Responsibilities

• Coordinate cybersecurity awareness activities, including planning and delivering training and phishing simulation campaigns.
• Work with business and IT teams to understand requirements and support improvements to security and identity management processes.
• Support SailPoint IdentityIQ (IIQ) activities, including access requests, approvals, access reviews, and identity data checks.
• Assist with identity lifecycle processes, including joiner, mover, and leaver activities.
• Gather, document, and validate business requirements for identity and access management (IAM) changes and enhancements.
• Support user acceptance testing (UAT) by preparing test scenarios, recording results, tracking issues, and coordinating retesting.
• Maintain IAM process documentation, user guides, procedures, and records to ensure they are accurate and up to date.
• Coordinate with application and business owners to follow up on access review actions and elevate overdue items.
• Assist with audit and compliance requests by gathering IAM evidence and tracking remediation actions.
• Monitor and report on IAM and security awareness activities, identify process gaps, and recommend improvements.

Requirements

• Bachelor’s degree or above in computer science, engineering or related domain discipline
• 2 to 4 years of experience in in IT domains
• Ability in manage IT projects and stakeholders of IT projects
• Basic understanding of identity lifecycle processes, such as joiner, mover, and leaver (JML).
• Familiarity with access requests, approvals, access reviews, and user provisioning.
• Awareness of access control principles, including least privilege and segregation of duties (SoD).
• Strong interpersonal / organizational / problem-solving / project management / client serving / multi-tasking skills
• Able to work independently / attention to details / result-driven/ self-motivated / self-starter / proactive mindset / enthusiastic/ a team player
• Excellent command of / fluent in both spoken and written in English
• Assertive, yet calm personality