Cybersecurity Systems Analyst & Risk Specialist (2-Year Contract)

Airport Authority; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

Airport Authority in Hong Kong seeks a cybersecurity professional for a fixed-term role of at least 2 years to lead security projects from design to delivery, including procurement, documentation and stakeholder engagement.

You will integrate new systems with existing security platforms, work with ITD and vendors to align security across IT, implement endpoint/network controls, and provide first-line incident response support and log analysis.

Qualifications

• Degree in IT/CS with at least 3 years IT work experience, incl. 1 year in cybersecurity.
• Solid information security management across cloud, virtualization, databases and apps.
• Hands-on security operations, threat hunting and incident response in large orgs.

Responsibilities

• Assist management to plan and execute cybersecurity projects (design, procurement, docs, contractor mgmt).
• Integrate new system with existing security platforms to maximise overall capability.
• Collaborate with vendors/ITD to align security with IT systems.
• Implement controls to maintain security posture for endpoints and network.
• Support cybersecurity systems and infrastructure operations for the Authority.
• First-line security operations and incident response: info gathering, log analysis, stakeholder engagement.
• Coordinate with IT operations, infrastructure leads and vendors to respond to security events.

Skills

CI & GRC Knowledge

Data Loss Prevention

Systems Risk Assessment

Education

Degree in IT / CS

Tools

NDR

DLP

EDR/AV

SASE

SIEM

SOAR

ASM

Job description

Airport Authority in Hong Kong seeks a cybersecurity professional for a fixed-term role of at least 2 years to lead security projects from design to delivery, including procurement, documentation and stakeholder engagement.

You will integrate new systems with existing security platforms, work with ITD and vendors to align security across IT, implement endpoint/network controls, and provide first-line incident response support and log analysis.