Contract Systems Analyst (Bid Ref 61594-1)

InfoTech Services (Hong Kong) Limited; Hong Kong; On-site; HKD 335,000 - 469,000; Full time

Job summary

InfoTech Services (Hong Kong) Limited seeks a Contract Systems Analyst to support the iAM Smart project. You will coordinate with contractors and internal teams to ensure ISO/IEC 27001:2022 and 27701:2019 compliance and audit readiness.

This contract role focuses on policy, risk management, and IT operations, with a clear path to ensuring the daily system operations remain secure and compliant. Fluency in English is required; Cantonese is a plus.

Qualifications

• At least 4 years post-qualification experience, with 1+ year in a similar post.
• Bachelor's degree or higher diploma in Computer Science or IT.
• Good command of written and spoken English; Cantonese advantageous.
• Experience with information security frameworks and audits.

Responsibilities

• Coordinate with contractors, operation and support teams to implement ISO/IEC standards.
• Assist in planning, designing, and reviewing processes for system compliance.
• Support audit activities for iAM Smart and related certifications.
• Ensure daily operations comply with information security standards.
• Assist project management and ensure timely deliverables.

Skills

Information Security

Cyber Security

Data Privacy

IT Operation

Audit experience

Education

Bachelor's/Higher Diploma in CS/IT

Tools

ISO27001

ITIL

Job description

Job Title/ Category Contract Systems Analyst (Bid Ref 61594-1)

Number Of Vacancy 1

Relevant Field Others

Nature Contract

Deadline 13 Nov 2026

Contract Period 28 Dec 2026 to 31 Jan 2027 (1 month)

Payroll under InfoTech

Employer Business Government T26 Contract

Location Base Hong Kong Island

Work in Guangdong Province N/A

Monthly Salary Range HK$ N/A - N/A

Project Nature (T26) The project is for a digital identity system, "iAM Smart" (the System), which consists of cloud-based back-end systems and mobile app. It is a key smart city infrastructure to provide all Hong Kong residents with a single identity and authentication to conduct online government and commercial transactions in a simple, convenient and secure manner. The CSA will coordinate with different parties including operation and support teams of the System to ensure the service quality and compliance to ISO/IEC 27001:2022 and ISO/IEC 27701:2019.

Duties

• Serve a contract assignment under InfoTech's headcount, full-time second to serve the DPO;
• To assist project management and coordinate various parties, such as contractors, operation and support teams implement and maintain the management systems according to standards such as ISO/IEC 27001:2022 and ISO/IEC 27701:2019 for the iAM Smart system
• To work with the contractors, operation and support teams to provide audit support for obtaining and maintaining iAM Smart certifications of the relevant ISO/IEC standards;
• To assist in planning, designing, coordinating, and reviewing the adoption of processes and controls in consultation with the contractors, the operation and support teams to ensure the daily operations are in compliance with the relevant ISO/IEC standards;
• To carry out any other activities which are necessary for supporting the services and operations of the System as assigned by the supervisors;
• Any other duties assigned by the supervisors.

Yrs of Total Post-Quali Exp 4.0

Yrs of Relevant Exp 1.0

Requirements Mandatory

• At least one year experience in one or more of the following aspects (a) Information System Policy, Standard and Framework; (b) Cyber security, risk management or data privacy compliance; (c) IT operation
• Good command in spoken Cantonese and English, as well as written Chinese and English; and
• Good communication and interpersonal skills.

Optional

• Valid certification in information security (e.g. CISM, CISA, CISSP, ITIL, ISO27001 LA etc.);
• Experience in IT audits, cyber security assessments such as Security Risk Assessment and Audit, Privacy Impact Assessment and Privacy Compliance Audit; and
• Experience in working with accredited certification body.

Technical Skills:

• . At least 1 year's experience in IT Security (ITS);
• . 1 year's experience in Security Risk Assessment and Audit (SAA) is an advantage;
• . 1 year's experience in IT Application Development and Management (ADM) is an advantage;
• . 1 year's experience in IT Planning (ITP) is an advantage.

Non-technical Skills:

• . Good written English is a must;
• . Good coordination skills is an advantage;
• . 1 year's experience in managing corporate IT security framework (CSF) is an advantage;
• . 1 year's experience in the management and support of Government systems and services (GSS) is an advantage;
• . 1 year's experience in managing international security standards (ISD) is an advantage;
• . 1 year's experience in IT audit (ITA) is an advantage;
• . 1 year's experience in IT service/outsourcing management (OUT) is an advantage;
• . 1 year's experience in IT Service Management (SMG) is an advantage.

• - Bachelor's degree/Higher Diploma in Computer Science, IT or equivalent;
• - At least 4 years' post-qualification experience in which at least 1 year's relevant experience in a similar post and in a comparable capacity.

Last Update 30 Oct 2026