Cybersecurity Risk & Penetration Specialist

LPS; Hong Kong; On-site; HKD 420,000 - 700,000; Full time

Job summary

Lenovo is seeking a dedicated IT Risk and Security professional in Hong Kong to conduct risk assessments, oversee control effectiveness, and support security operations across IT systems. The role emphasizes governance, incident-ready defense, and collaboration with stakeholders to strengthen the security posture.

Responsibilities include risk assessment, penetration testing oversight, control reviews, and facilitating audits with internal and external parties, with a focus on threat detection

Qualifications

• Degree in Computer Science, IT, Information Systems or related field.
• Stakeholder management experience and ability to build a positive risk culture.
• 2 years’ experience in Information Security / Technology Risk Management.
• Knowledge of Information Security, Business Continuity, Project Management, and Application Security.
• One or more certifications such as CISSP, CISA, CISM, CISP, OSCP, CEH, CRTP, or CRT is a plus.

Responsibilities

• Conduct comprehensive risk and control assessments across IT systems, applications, and networks.
• Conduct penetration testing to identify vulnerabilities and drive remediation plans.
• Support security teams in defining and managing security operations through policies and controls.
• Evaluate IT control processes to ensure effective design and operation.
• Facilitate audit and security control reviews with internal teams and external parties.
• Promote communication between internal teams and external parties on risk and cybersecurity matters.

Skills

Stakeholder management

Information Security knowledge

Business Continuity

Project Management

Application Security

Education

Bachelor's degree in Computer Science, Information Technology, Information System or related disciplines

Job description

Lenovo is seeking a dedicated IT Risk and Security professional in Hong Kong to conduct risk assessments, oversee control effectiveness, and support security operations across IT systems. The role emphasizes governance, incident-ready defense, and collaboration with stakeholders to strengthen the security posture.

Responsibilities include risk assessment, penetration testing oversight, control reviews, and facilitating audits with internal and external parties, with a focus on threat detection