Cybersecurity Risk & Penetration Specialist

Lenovo; Hong Kong; On-site; HKD 420,000 - 700,000; Full time

Job summary

Lenovo is seeking an Information Security / Technology Risk professional in Hong Kong to conduct risk and control assessments across IT systems, applications, and networks. The role involves performing penetration testing, implementing remediation plans, and supporting security operations through governance frameworks.

The ideal candidate has a CS/IT/IS degree, 2 years of information security experience, stakeholder management skills, and relevant certifications; knowledge of security,

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information System or related disciplines.
• Stakeholder management experience and ability to build a positive risk culture across the organization.
• 2 years’ experience in Information Security / Technology Risk Management.
• Sound knowledge in Information Security, Business Continuity, Project Management, Application Security and industry best practices.
• Holder of one or more of the following certifications is a plus: CISSP, CISA, CISM, CISP, OSCP, CEH, CRTP, and CRT.

Responsibilities

• Conduct risk and control assessments across IT systems, applications, and networks.
• Conduct penetration testing to identify vulnerabilities and assess security controls.
• Implement remediation plans to strengthen security posture.
• Support security teams in defining, assessing, and managing security operations through policies and control frameworks.
• Proactively evaluate IT control processes to ensure the control environment is properly designed and functioning.
• Facilitate audit and security control reviews with internal teams and external parties, enhancing threat detection and mitigation.
• Promote communication and collaboration between internal teams and external parties on risk and cybersecurity matters.

Skills

Risk assessment

Penetration testing

Security operations

Threat detection

Communication

Education

Bachelor's degree in CS/IT/IS

Job description

Lenovo is seeking an Information Security / Technology Risk professional in Hong Kong to conduct risk and control assessments across IT systems, applications, and networks. The role involves performing penetration testing, implementing remediation plans, and supporting security operations through governance frameworks.

The ideal candidate has a CS/IT/IS degree, 2 years of information security experience, stakeholder management skills, and relevant certifications; knowledge of security,