IT Security Analyst

Puyi Optical; Hong Kong; On-site; HKD 420,000 - 660,000; Full time

Job summary

Puyi Optical is seeking an IT Security Analyst to strengthen information security across infrastructure, cloud platforms, applications and end-user environments. The role focuses on daily security operations, incident handling, and user security awareness in line with group IT security standards.

You will monitor alerts from endpoints, email, network and cloud services; investigate incidents, support remediation, and assist with vulnerability management and patching.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or related field.
• 2–5 years in IT security or security operations.
• Knowledge of phishing, malware, ransomware and social engineering.
• Experience with Microsoft 365 security, cloud security and EDR.
• Familiar with incident response and vulnerability management.
• Ability to work independently and under pressure.
• Strong communication in English, Mandarin, and Cantonese.

Responsibilities

• Monitor security alerts from endpoint, email, network, and cloud systems.
• Investigate incidents, identify root causes, assist remediation.
• Support vulnerability scanning and patch management.
• Assist with security policies, risk assessments, and audits.
• Maintain security documentation and risk registers.
• Collaborate with vendors on security matters.
• Participate in IT and security projects and AI tool assessments.

Skills

Incident response

Vulnerability assessment

EDR management

Microsoft 365 security

Cloud security

Phishing analysis

Security awareness training

Log analysis

English/Mandarin/Cantonese

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

Sophos Central

Check Point

MS Defender

Azure AD / Entra ID

MFA / Conditional Access

Job description

The IT Security Analyst supports and improves the organisation's information security across infrastructure, cloud platforms, applications, and end-user environments. This role focuses on daily security operations, incident handling, and user security awareness, ensuring compliance with group IT security standards.

Key Responsibilities:

Security Operations & Monitoring

• Monitor and handle security alerts from endpoint, email, network, and cloud security systems.
• Investigate security incidents, identify root causes, and assist with remediation.
• Support vulnerability scanning, tracking, and remediation follow-up.
• Assist with endpoint and server patch management, monitor patch compliance and assist with remediation of high-risk vulnerabilities.

Policy, Governance & Compliance

• Support the implementation and maintenance of IT security policies, standards, and guidelines.
• Assist with security risk assessments for systems, applications, and third-party vendors.
• Support compliance with internal policies and external standards such as ISO 27001.
• Maintain security documentation, risk registers, and audit records.
• Support security controls for Microsoft 365, Azure, and other cloud services.
• Assist with identity and access management (Entra ID / Azure AD), including MFA and conditional access.
• Review configurations related to data protection, logging, and access control.

Endpoint, Email & User Security

• Support endpoint protection, device compliance, and security hardening.
• Assist with email security, phishing analysis, and user-reported incidents.
• Support security awareness training and user education initiatives.
• Participate in IT and security projects, including new system rollouts and AI tool assessments.
• Work with vendors and service providers on security-related matters.
• Continuously review and improve security controls and processes.

Requirements:

• Bachelor's degree in IT, Computer Science, Cybersecurity, or a related discipline.
• 2-5 years of experience in IT security, cybersecurity operations, or a related support role.
• Good knowledge of common security threats such as phishing, malware, ransomware, account compromise, and social engineering.
• Familiarity with Microsoft 365 security features, cloud security (AWS or Alibaba Cloud is an advantage), EDR (Sophos Central), email security (Check Point / MS Defender), firewalls, and basic log analysis.
• Understanding incident response and vulnerability management principles.
• Experience supporting security awareness training or phishing simulations is an advantage.
• Good communication skills in English, Mandarin, and Cantonese.
• Able to work independently, prioritise tasks, and handle incidents under pressure.

Personal data collected will be used for recruitment purpose only.