Information Security Specialist, Information Technology

Canadian International School; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Benefits offered by this job

13th-month pay

5 school holidays + annual leave

School bus service

Staff discounts

Job summary

Canadian International School in Hong Kong is seeking an Information Security Specialist to support the cybersecurity program. You will review controls, monitor audits, and coordinate remediation with auditors, vendors and internal teams.

The ideal candidate has 5+ years in information security, strong knowledge of frameworks, and experience with Microsoft 365, Azure, and endpoint protection. Senior/Architect consideration may apply for more experienced candidates.

Qualifications

• Bachelor's degree or equivalent in Information Security, Cybersecurity, IT, CS or related field
• Relevant industry certifications such as CISSP, CISM, Security+ or SC-200/SC-300/AZ-500 desirable
• Minimum 5 years of hands-on information security experience including audits, compliance and risk management

Responsibilities

• Review, monitor, and maintain information security controls to ensure audit and regulatory compliance
• Coordinate internal and external security audits, assessments, and remediation activities
• Administer security technologies including firewalls, endpoint protection, IAM, and vulnerability management
• Support threat monitoring, incident response, and vulnerability management with SOC/IT teams
• Promote cybersecurity awareness through training, phishing simulations, and communications

Skills

InfoSec knowledge

Audits & compliance

Risk assessment

Incident response

Education

Bachelor's degree in Information Security or related field

CISSP/CISM/Security+ or equivalent

Tools

Fortinet

Sangfor

Juniper

H3C

M365 / Azure AD

Defender / IAM tools

Job description

Jora Hong Kong will close on 16th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Information Security Specialist, Information Technology

The Information Security Specialist reports directly to the Deputy Head of Information Technology and is responsible for supporting the school's cybersecurity and information security programme. The primary focus of the role is to review, monitor, and maintain the effectiveness of the school's information security controls, systems, and solutions to ensure ongoing compliance with audit, regulatory, and governance requirements.

Working closely with internal stakeholders, external auditors, vendors, and security partners, the role coordinates security assessments, audits, compliance reviews, and remediation activities. The position is responsible for maintaining security documentation, supporting risk management processes, and ensuring that security controls remain effective and aligned with industry best practices.

The Information Security Specialist also plays a key role in promoting cybersecurity awareness across the organisation, leading initiatives such as anti-phishing campaigns, security awareness training, and other activities that strengthen the school's overall security culture.

The role is responsible for administering and monitoring cybersecurity platforms and infrastructure, including firewalls, endpoint protection solutions, and other security technologies. Working alongside the organisation's Security Operations Centre (SOC) and technology teams, the position supports threat monitoring, incident response, vulnerability management, and the continuous improvement of the school's security posture.

The ideal candidate will possess strong knowledge of cybersecurity frameworks, security technologies, audit and compliance processes, and information security best practices, along with the ability to effectively communicate and collaborate with both technical and non-technical stakeholders.

Candidates with more experience may be considered for a Senior Information Security Specialist or Information Security Architect role.

Duties & Responsibilities

• Review, assess, and maintain the effectiveness of the school's information security controls, platforms, and processes to ensure compliance with internal policies, audit requirements, regulatory obligations, and industry best practices.
• Coordinate and support internal and external security audits, assessments, compliance reviews, and risk management activities, acting as the primary liaison between auditors, vendors, consultants, and internal stakeholders.
• Administer, monitor, and continuously improve cybersecurity technologies and infrastructure, including firewalls, endpoint protection platforms, email security, identity and access management solutions, and other security systems.
• Work closely with the Security Operations Centre (SOC) and technology teams to support threat monitoring, incident response, vulnerability management, security investigations, and remediation efforts.
• Promote and champion information security awareness across the organisation through training, communications, phishing simulations, anti-phishing campaigns, and other cybersecurity awareness initiatives.
• Provide security guidance and operational support for Microsoft 365, Microsoft Entra ID (Azure AD), Intune, and related cloud services, while leveraging familiarity with Apple device ecosystems (macOS and iPadOS). Experience administering and maintaining Microsoft 365 and Azure environments is considered a strong advantage.

Professional Experience & Qualifications

• Bachelor's degree or equivalent in Information Security, Cybersecurity, Information Technology, Computer Science, or a related discipline, with relevant industry certifications such as CISSP, CISM, Security+, SC-200, SC-300, AZ-500, or equivalent certifications highly desirable.
• Minimum 5 years of hands-on experience in information security, cybersecurity operations/engineer, IT compliance and audit, or related IT Infosec-focused roles
• Strong knowledge of cybersecurity frameworks, security governance, audit and compliance requirements, risk assessments, vulnerability management, incident response, and information security best practices, with demonstrated experience supporting audits and remediation activities.
• Proven experience administering and supporting security technologies including firewalls (Fortinet, Sangfor, Juniper, H3C etc.), endpoint protection platforms (JAMF, Sentinel One, MS Defender), email security solutions, IAM solutions, vulnerability management tools, security training, and security monitoring platforms.
• Strong understanding of Microsoft 365, Microsoft Entra ID (Azure AD), Microsoft Defender and related cloud security technologies, with experience administering Microsoft 365 and Azure environments considered a significant advantage; familiarity with Apple device ecosystems including macOS, iPadOS, and enterprise device management solutions is also desirable.
• Excellent analytical, communication, and stakeholder management skills, with the ability to work effectively with internal users, leadership teams, external auditors, vendors, security partners, and SOC, while maintaining a proactive, detail-oriented, and security-focused approach.

What We Offer

• 13th-month pay
• 5 days of school holidays (in addition to annual leave)
• Complimentary school bus service (with shuttle routes conveniently passing through major MTR stations across Hong Kong Island and Kowloon)
• Staff discounts at the school canteen

Safety is Our First Priority

CDNIS believes that every child has the right to grow up in a healthy, safe, secure and supportive environment. As an institution CDNIS prioritises and promotes child protection above all else and adopts a strict zero tolerance policy towards the mistreatment or abuse of children.

CDNIS supports the International Task Force on Child Protection (ITFCP) Reports and Recommendations and we hold ourselves to a high standard of effective recruitment practices with specific attention to Child Protection.

As part of our safer recruitment procedures, CDNIS conducts pre-employment reference checks before confirming any appointment. Furthermore, CDNIS requests all successful candidates to undergo criminal record checks at their local police and/or Sexual Conviction Record Check (SCRC) in Hong Kong.

Personal data collected are for recruitment purpose only and will be used strictly in accordance with the employer's personal data policies. Please refer to the Canadian International School of Hong Kong Limited's Privacy Policy Statement at CDNIS Privacy Policy (https://www.cdnis.edu.hk/policies/privacy-policy).

Personal data of unsuccessful applicants will be retained for a maximum of 24 months from the date the vacancy has been filled.

Be careful - Don’t provide your bank or credit card details when applying for jobs. Don't transfer any money or complete suspicious online surveys. If you see something suspicious, report this job ad.