Information Technology Officer

Leadingnation; Hong Kong; On-site; HKD 66,000 - 83,000; Full time

Benefits offered by this job

Paid leave

Medical benefits

Dental benefits

Job summary

The Legislative Council Commission seeks a seasoned IT professional to lead AI and cybersecurity initiatives, researching and evaluating AI/cybersecurity products, developing and implementing projects, and providing technical support for diverse IT systems and AI-powered solutions.

Responsibilities include project deployment, tender preparation, system integration, and security controls across APIs, data pipelines, and AI models, with strong emphasis on incident response and vendor coordination.

Qualifications

• 具備AI/網絡安全相關或資訊科技系統規劃、設計、編程、推行、安裝、融合、測試、維護、操作及技術支援的六年以上實務經驗。
• 熟悉提示工程、檢索增強生成、自然語言處理、機器學習與深度學習演算法，以及多種AI代理與多型大型語言模型技術。
• 熟練使用主流AI框架（TensorFlow、PyTorch）及編程語言（Python），具網絡安全操作與事故處理經驗者佳。

Responsibilities

• 執行涉及AI及/或網絡安全的技術研究、產品分析及評估、項目開發及推行。
• 管理日常運作，為各IT系統、網路安全工具、事務應用及AI解決方案提供技術支援。
• 推動AI及/或網絡安全相關專案，包括標書擬備、採購、系統分析、設計、編程、配置、落實、整合、部署、測試及用戶培訓。
• 協助撥款申請建議、成本效益分析及預算控制。
• 就AI聊天機器人代理、LLMs等提供程式設計及技術支援，含RAG、虛擬助手、NLP與大數據分析。
• 參與多模態LLM、AI代理解決方案與多代理協作應用的開發與部署，協助實施安全控管。
• 監控供應商服務品質及符合網安、資料保護及安全等級要求。
• 提升事務應用系統以整合AI與網安控制。
• 支援網絡安全作業：漏洞掃描、修補程式管理、日誌覆檢、存取覆檢、端點/伺服器/網路安全監控、備份與復原、補救跟進。
• 參與網安事故應變、調查、取證與匯報，與內部及外部相關方協調。
• 按需參與其他資訊科技/電子系統推行、支援、維護及網安工作。

Skills

Prompt engineering

RAG techniques

Natural language processing

Machine learning

Multi-LLM tech

API design

System integration

Python

Cybersecurity operations

Vulnerability scanning

Incident handling

Log monitoring

Data protection

Education

Bachelor's degree in electronic engineering, computer science, IT, AI engineering, computer engineering, data science, cybersecurity, information security, or equivalent

Tools

TensorFlow

PyTorch

Python

Alibaba Qwen

Azure OpenAI

LLaMA

DeepSeek

Grok

Job description

• AI and/or cybersecurity technical research, product analysis and evaluation
• AI and/or cybersecurity project development and implementation
• Technical support for various IT systems

Main duties

• (a)conducting artificial intelligence ("AI") and/or cybersecurity technical research, product analysis and evaluation, project development and implementation;
• (b)managing daily operations and providing technical support for various information technology ("IT") systems, cybersecurity tools, business applications and AI-powered solutions;
• (c)implementing AI-related and/or cybersecurity-related projects, including tender preparation, procurement, system analysis, design, programming, secure configuration, implementation, integration, deployment, testing and user training;
• (d)assisting in the preparation of funding proposals, cost-benefit analysis and budget control;
• (e)providing programming and technical support on AI chatbot agents, large language models ("LLMs"), prompt engineering, retrieval-augmented generation ("RAG"), virtual assistants, natural language processing, big data analytics and secure AI application development;
• (f)participating in the development, deployment and system tuning of multimodal LLMs, multiple AI agent solutions and multi-LLM agent collaboration applications, and assisting in the implementation of security controls for AI models, data pipelines, application programming interfaces ("APIs") and integration interfaces;
• (g)monitoring the quality of services and performance of vendors of products and services, including their compliance with cybersecurity, data protection and security level requirements;
• (h)enhancing various business application systems for integration with AI-powered solutions and cybersecurity controls;
• (i)assisting in cybersecurity operations, including vulnerability scanning, patch management, security log review, access right review, endpoint/server/network security monitoring, security baseline checking, backup and recovery verification, and follow-up on remediation actions;
• (j)supporting cybersecurity incident response, investigation, evidence collection, reporting and coordination with internal users, vendors and relevant parties; and
• (k)taking part in any other IT/electronic system project implementation, support, maintenance and cybersecurity duties as required.

Entry requirements

• (a)a recognized university degree in electronic engineering, computer science, IT, AI engineering, computer engineering, data science, cybersecurity, information security, or equivalent;
• (b)at least six years of relevant and hands‑on experience in planning, designing, programming, implementing, installing, integrating, testing, maintaining, operating, and providing technical support for AI-related, cybersecurity-related or IT systems;
• (c)proficiency in/knowledge of some of the following work areas/technologies:
  • prompt engineering, RAG techniques, natural language processing, machine learning and deep learning algorithms, multiple AI agents and multi-LLM technologies, API design and system integration;
  • different LLM setup, configuration and system tuning such as DeepSeek, Alibaba Qwen, iFLYTEK Spark, Kimi, Microsoft Azure OpenAI/GPT, Gemini, Grok, LLaMA, etc.;
  • mainstream AI frameworks (e.g. TensorFlow, PyTorch) and programming languages (e.g. Python);
  • cybersecurity operations, including vulnerability scanning, patch management, access control, security hardening, log monitoring, endpoint/server/network security, backup and recovery, security testing and incident handling;
  • common web application, API, cloud and AI security risks; and
  • cybersecurity standards and good practices, such as the Digital Policy Office’s IT Security Policy and Guidelines, GB/T 22239-2019, GB/T 22240-2020, GB/T 28448-2019, ISO/IEC 27001, cloud security best practices and secure software development lifecycle;
• (d)an excellent command of written and spoken Chinese and English;
• (e)very strong analytical, communication, negotiation, problem-solving and supervisory skills; and
• (f)the ability to work independently as well as under pressure, and to lead junior team members to deliver timely, quality and secure IT services.

Experience in supporting security audits, risk assessments, penetration testing, security documentation, incident response, vendor coordination and remediation follow-up would be an advantage.

Preference will be given to applicants who possess the following IT professional certifications

• Huawei Certified ICT Associate - Artificial Intelligence
• Alibaba Cloud Associate Generative AI Engineer
• Microsoft Azure AI Engineer
• AWS Certified AI Practitioner
• AWS Certified Machine Learning - Specialty
• Google Professional Machine Learning Engineer
• Certified Professional Python Programming Level 2 (PCPP2)
• PMI Certified Professional in Managing AI (PMI-CPMAI)
• Project Management Professional (PMP)

Cybersecurity Certifications

• Certified Information Security Professional (CISP)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Advanced in AI Audit (AAIA) Certification
• Certified Cloud Security Professional (CCSP)
• Offensive Security Certified Professional (OSCP
• Certified Ethical Hacker (CEH)
• ISO/IEC 27001 Auditor / Lead Auditor
• Certified AI Security Professional (CAISP)
• Certificate of Cloud Security Knowledge (CCSK)

All applicants should be willing to work beyond normal office hours and on holidays when needed.

The Secretariat may devise further criteria to shortlist applicants.

Remuneration

The starting salary is $66,075 per month, increasing by five annual increments to $83,140 subject to satisfactory conduct and work performance. There is also a monthly cash allowance for the rank of Information Technology Officer (the current rate is $1,225 per month). Successful applicants will be appointed on three-year agreement terms subject to renewal upon satisfactory completion of service, at which the appointees will be eligible for an end‑of‑agreement gratuity. The gratuity, when added to the employer’s contribution to a Mandatory Provident Fund Scheme, is equal to 15% of the total basic salary drawn during the agreement period. Fringe benefits include paid leave as well as medical and dental benefits.

All personal data provided will be treated in strict confidence. Applicants not invited for interview within eight weeks from the closing date may assume their applications unsuccessful.

As an equal opportunities employer, The Legislative Council Commission is committed to ensuring that there is no discrimination in employment with the Secretariat. The posts advertised are open to all applicants meeting the basic entry requirements irrespective of their disability, gender, marital status, pregnancy, age, family status, sexual orientation and race.

Note that the Secretariat has not authorized any employment agencies or third-party organizations to receive applications on behalf of the Secretariat.

主要職責

• (a)進行涉及人工智能及/或網絡安全的技術研究、產品分析及評估、項目開發及推行工作；
• (b)管理日常運作，並為各個資訊科技系統、網絡安全工具、事務應用程式及人工智能解決方案提供技術支援；
• (c)推行與人工智能及/或網絡安全相關的項目，包括擬備標書、採購、系統分析、設計、編程、安全配置、落實、融合、部署、測試及用戶培訓；
• (d)協助擬備撥款申請建議、成本效益分析及預算控制；
• (e)就人工智能聊天機器人代理、大型語言模型、提示工程、檢索增強生成、虛擬助手、自然語言處理、大數據分析，以及安全人工智能應用程式開發提供編程和技術支援；
• (f)參與多模態大型語言模型、多種人工智能代理解決方案和多種大型語言模型代理協作應用程式的開發、部署和系統調整，以及協助為人工智能模型、資料管道、應用程式介面及融合介面實施安全控制；
• (g)監控產品和服務供應商的服務質素和表現，包括符合網絡安全、資料保護及安全水平的要求；
• (h)優化各個事務應用系統，以便與人工智能解決方案及網絡安全控制融合；
• (i)協助網絡安全運作，包括保安漏洞掃描、修補程式管理、保安日誌覆檢、存取權限覆檢、端點/伺服器/網路安全監控、保安基準檢查、備份與復原核實，以及補救行動的跟進工作；
• (j)支援網絡安全事故的應變、調查、搜證、匯報工作，以及與內部使用者、供應商及相關各方進行協調；
• (k)按要求參與任何其他資訊科技/電子系統項目的推行、支援、維護，以及網絡安全的工作。

入職條件

• (a)電子工程、計算機科學、資訊科技、人工智能工程、電腦工程、資料科學、網絡安全、資訊保安的認可大學學位，或同等學歷；
• (b)最少6年從事下列範疇工作的相關及實際經驗：人工智能、網絡安全相關或資訊科技系統的規劃、設計、編程、推行、安裝、融合、測試、維護、操作和提供技術支援；
• (c)對以下部分工作範疇/技術的深入認識/知識：
  • 提示工程、檢索增強生成技術、自然語言處理、機器學習與深度學習演算法、多種人工智能代理及多種大型語言模型技術、應用程式界面的設計與系統融合；
  • 不同大型語言模型(例如DeepSeek、Alibaba Qwen、iFLYTEK Spark、Kimi、Microsoft Azure OpenAI/GPT、Gemini、Grok、LLaMA等)的設定、配置及系統調整；
  • 主流的人工智能框架(例如TensorFlow、PyTorch)及編程語言(例如Python)；
  • 網絡安全運作，包括保安漏洞掃描、修補程式管理、存取控制、安全加固、日誌監控、端點/伺服器/網絡安全、備份與復原、安全測試及事故處理；
  • 常見的網絡應用程式、應用程式介面、雲端及人工智能保安風險；及
  • 網絡安全標準及良好作業模式，例如數字政策辦公室的資訊科技保安政策及指引、GB/T 22239-2019、GB/T 22240-2020、GB/T 28448-2019、ISO/IEC 27001、雲端保安最佳作業模式及保安軟件開發生命周期；
• (d)極佳的中英文講寫能力；
• (e)非常良好的分析、溝通、商談、解難和督導技巧；及
• (f)能獨立工作和承受工作壓力，並善於領導團隊初級成員提供適時、優質及安全的資訊科技服務。

具備支援安全審核、風險評估、滲透測試、安全文件紀錄、事故應變、供應商協調及補救跟進工作的經驗更佳。

申請

秘書處只接受網上申請上述職位。秘書處將以電郵或電話方式通知初步入選的申請人。申請人提供的所有個人資料均會嚴加保密。申請人如於截止日期後8星期內未獲邀參加面試，可當作其申請不成功。

立法會行政管理委員會為平等機會僱主，致力確保秘書處沒有就業方面的歧視。所有符合基本入職條件的人士，不論其殘疾、性別、婚姻狀況、懷孕與否、年齡、家庭崗位、性傾向及種族，均可申請以上職位。

請注意，秘書處並無授權任何職業介紹所或第三方機構代表本處接收申請。

薪酬

入職薪酬為每月66,075元，如職員的行為及工作表現令人滿意，可按5個按年增薪額增至83,140元。另有為資訊科技主任職級而設的每月現金津貼(現時的津貼額為每月1,225元)。成功受聘人士會按合約條款受聘，為期3年，倘完成服務期而工作表現良好，可獲續約，並會獲得一筆約滿酬金，其款額加上僱主在強制性公積金計劃下所作的供款，相等於合約期內所得底薪總額的15%。附帶福利包括有薪假期、醫療及牙科福利。