Cybersecurity Risk & Penetration Consultant

Lenovo; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Lenovo is seeking a cybersecurity risk professional in Hong Kong to conduct risk assessments, penetration testing, and control framework enforcement. The role emphasizes collaboration with internal teams and external partners to strengthen information security and business continuity across IT systems and applications.

Applicants should have a high diploma in relevant fields, knowledge of information security practices, and certifications are a plus.

Qualifications

• Knowledge of information security, business continuity, project management and application security.
• Familiarity with industry best practices and controls.
• Certifications such as CISSP, CISA, CISM, OSCP, CEH are a plus.

Responsibilities

• Conduct comprehensive risk and control assessments to identify, evaluate, monitor, and mitigate risks across IT systems, applications, and network operations.
• Conduct penetration testing to identify vulnerabilities and assess the effectiveness of security controls. Implement remediation plans based on penetration test findings to strengthen the security posture.
• Support security teams in defining, assessing, and managing security operations through appropriate policies, procedures, and control frameworks.
• Proactively evaluate IT control processes and activities to ensure the control environment is effectively designed and functioning.
• Facilitate audit and security control reviews with internal teams and external parties, prioritizing and mitigating risks to acceptable levels.
• Enhance security measures such as threat detection, attack penetration, and mitigation based on current and emerging threats.
• Promote communication and collaboration between internal teams and external parties on risk and cybersecurity matters.

Skills

Information Security

Business Continuity

Project Management

Application Security

Education

High Diploma in Cybersecurity, Computer Science, Information Technology, Information System or related disciplines

Job description

Lenovo is seeking a cybersecurity risk professional in Hong Kong to conduct risk assessments, penetration testing, and control framework enforcement. The role emphasizes collaboration with internal teams and external partners to strengthen information security and business continuity across IT systems and applications.

Applicants should have a high diploma in relevant fields, knowledge of information security practices, and certifications are a plus.