Contract Technical Analyst (CAT3) - Active Directory, SRAA (C41115)

InfoTech Services ( HK ) Ltd. 資訊科技服務(香港)有限公司; Sha Tin; On-site; HKD 480,000 - 640,000; Full time

Job summary

InfoTech Services (Hong Kong) Limited seeks a Contract Technical Analyst (CAT3) to maintain Active Directory Domain Services, coordinate vulnerability scanning, and lead security audits. The role involves project management across owners, support teams, and external providers, ensuring policy-aligned assessments and secure Windows migrations.

The ideal candidate has 5+ years in IT security, AD administration, and audit/assessment, plus strong English and Cantonese communication.

Qualifications

• Bachelor's degree in Computer Science, IT, or related discipline.
• Minimum 5 years' experience in system analysis, IT infrastructure, or security operations.
• Hands-on experience with Active Directory Domain Services administration and troubleshooting.
• Experience in vulnerability management and remediation processes.
• Knowledge of government security policies is an advantage.
• Strong project management and multi-stakeholder coordination skills.
• Fluency in English and Cantonese preferred.

Responsibilities

• Maintain and support Active Directory Domain Services, ensuring reliability and security.
• Lead vulnerability scanning and remediation processes.
• Coordinate project management between system owners, support teams, and external service providers.
• Conduct system assessments and audits per security policies and guidelines.
• Coordinate Windows migration exercises with minimal disruption to operations.
• Prepare and present reports for management and audit purposes.

Skills

Active Directory Administration

IT Security

Security Risk Assessment

Vulnerability Management

Project Management

Audit & Compliance

English & Cantonese

Education

Bachelor's degree in Computer Science / IT

Tools

SQL

Windows Server / IIS

Vulnerability scanning tools

Web Programming (Struts)

Java Framework (Struts)

EGIS

Job description

Contract Technical Analyst (CAT3) - Active Directory, SRAA (C41115)

• Serve a contract assignment under InfoTech's headcount, full-time second to serve the gov.
• Maintain and support Active Directory Domain Services, ensuring system reliability and security.
• Manage and coordinate system vulnerability scanning, including the use of scanning tools, review of scan reports, and facilitation of remediation processes.
• Lead project management initiatives to coordinate actions between system owners, system support teams, and external service providers.
• Conduct regular system assessments and audits in accordance with established security policies and guidelines.
• Coordinate Windows migration exercises, ensuring seamless transition and minimal disruption to operations.
• Schedule audit timelines based on responses from system owners or support teams, ensuring timely completion of audits.
• Gather essential information for audit purposes and assist in drafting work assignment briefs.
• Review scan reports to identify true security risks and filter out false alarms.
• Liaise with cross-functional teams to drive continuous improvement in system security and operational efficiency.
• Prepare and present clear, concise reports and documentation for management.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or a related discipline.
• Minimum of 5 years of relevant experience in system analysis, IT infrastructure, or security operations.
• Hands-on experience with Active Directory Domain Services administration and troubleshooting.
• Proven experience in vulnerability management, including static and dynamic application security testing tools, and remediation processes.
• Understanding of infrastructure and web application vulnerabilities.
• Ability to review scan reports to find true security risks and filter out false alarms.
• Knowledge of government security policies and guidelines is an advantage.
• Strong project management skills, with the ability to manage multiple tasks and stakeholders simultaneously.
• Excellent communication and coordination skills in English and Chinese (Cantonese preferred).
• Ability to prepare and present clear, concise reports and documentation for management and audit purposes.
• Strong interpersonal skills to liaise with cross-functional teams and drive continuous improvement in system security and operational efficiency.
• Experience in scheduling audit timelines on servers, networks, and applications based on stakeholder feedback, latest security policies, and guidelines, and drafting work assignment briefs.
• Bachelor's degree/Higher Diploma in Computer Science, IT or equivalent;
• At least 4 years' post-qualification experience in which at least 2 years' relevant experience in a similar post and in a comparable capacity.

Technical Skills:

• At least 3 years' experience in Microsoft Active Directory Administration;
• At least 3 years' experience in IT Security;
• At least 3 years' experience in Security Risk Assessment and Audit;
• 3 years' experience in System Implementation and Maintenance/Support is an advantage;
• 3 years' experience in Structured Query Language is an advantage;
• 3 years' experience in Web Programming is an advantage;
• 3 years' experience in Java Application Framework (e.g. Struts (Apache)) is an advantage;
• 3 years' experience in Microsoft Internet Information Services is an advantage;
• 2 years' experience in EGIS is an advantage;
• 2 years' experience in IT Planning is an advantage.

Non-technical Skills:

• Good coordination skills is a must;
• At least 5 years' experience in project management;
• At least 3 years' experience in quality assurance;
• At least 3 years' experience in software testing;
• 3 years' experience in IT audit is an advantage;
• 2 years' experience in IT service/outsourcing management is an advantage.

Address: 18/F, Tower 2, Lippo Centre, 89 Queensway, Hong Kong.

About Us:

InfoTech Services (Hong Kong) Limited (‘InfoTech’) respects every job application. IT job seekers trust InfoTech and know that we are ready to help. We listen, speak the language and jargons, understand technical, pay level and career aspirations. InfoTech exists because of IT, InfoTech after all executes search and selection by human, aided with robust recruitment systems. InfoTech handles assignments with care, enthusiasm, diligence, ethics and professionalism.

InfoTech is well acquainted with development languages, scripts, frameworks, deployment, test tools, database, data analytics, AI, servers, virtualization, storage, networks, infrastructure and cybersecurity. InfoTech understands complex business logic and application flow, we know architectures and methodologies. InfoTech serves an extensive client base covering leading banks, financial institutions, government bureaux, departments, subvented organizations, Chinese and multinational corporations, academic and research institutes, vendors, systems integrators, etc.

InfoTech offers permanent placement, executive search and contract staff secondment services. InfoTech is one of the largest and longest established IT staff services and executive search companies in Hong Kong. Over our several decades' corporate history, it is believed that about a third of the IT working population in Hong Kong has been served by InfoTech, no matter as job seekers, placed candidates, contract staff or employers.

Innovation and Technology (I&T) talent is offering the right innovation and technology solutions for society, InfoTech endeavours to plan and provide the right career for I&T talents. Count on InfoTech, the best-in-class I&T career partner now.