IT Security Analyst

HAECO; Hong Kong; On-site; HKD 420,000 - 860,000; Full time

Job summary

HAECO Hong Kong seeks an IT Security Analyst to lead IT policies, risk and security operations, partnering with IT teams and service providers to deliver cybersecurity services and controls.

The role emphasizes governance, risk management, and compliance, with hands-on administration of security infrastructure and cloud security practices across the organization.

Qualifications

• 5–8 years of experience in cybersecurity or IT security project deliverables.
• Bachelor’s or master’s degree in computer science, computer engineering or related field.
• Experience with endpoint security, SIEM, DLP, WAF, IGA, SASE, ZTNA, NAC, email security and host & network firewalls.
• Experience with SOC and handling security alerts.
• Infrastructure administration including server, network, firewall and cloud computing.
• Working knowledge of Azure and related cloud security products (CSPM, DSPM, PIM, NSG, Front Door WAF).
• Knowledge of application security testing tools such as DataDog and Trivy.
• Security certifications such as CISSP, CCSP, CISM or equivalents are advantageous.
• Understanding of AI risk frameworks and governance for AI integrations.
• Ability to coordinate security policy governance across IT teams and vendors.
• Knowledge of data privacy laws (PDPO, GDPR, CCPA, PIPL, CSL, MLPS2).
• ISO27001 (ISMS) and ISO 42001 (AIMS) familiarity.
• Experience in vendor management and IT product evaluation.

Responsibilities

• IT Policies – Regular review and updates to keep policies current.
• IT Security Operations – Handle security incidents, deliver cybersecurity projects, and configure solutions.
• Governance, Risk, and Compliance – Define security governance, manage risks, ensure policy compliance.

Skills

Cybersecurity experience

Cloud security

AI risk frameworks

Vendor management

Data privacy laws

ISO27001 knowledge

Security certifications

SOC operations

Team coordination

Education

Bachelor's or Master’s in computer science/engineering

Tools

SIEM

DLP

WAF

IGA

SASE

ZTNA

NAC

Email security

Azure cloud

DataDog

Trivy

Job description

The HAECO Group is an independent global provider of high-quality MRO services. We offer a broad range of aviation products and services that enable our customers to operate their aircraft, engines and components safely and efficiently. Headquartered in Hong Kong since 1950, our global reach has extended as we have grown. We now have operations throughout the Asia-Pacific region, Americas and other parts of the world.

Based at Hong Kong International Airport (HKIA), HAECO Hong Kong offer a full range of services including airframe services, line services, component services, engine services, freighter conversions, technical training and AOG support.

The HAECO Group is an independent global provider of high-quality MRO services. We offer a broad range of aviation products and services that enable our customers to operate their aircraft, engines and components safely and efficiently. Headquartered in Hong Kong since 1950, our global reach has extended as we have grown. We now have operations throughout the Asia-Pacific region, Americas and other parts of the world.

Based at Hong Kong International Airport (HKIA), HAECO Hong Kong offer a full range of services including airframe services, line services, component services, engine services, freighter conversions, technical training and AOG support.

Position Description

IT Security Analyst is responsible for IT Policies, Risk and Security Operation for HAECO HKG.

He/she is responsible for establishing and maintaining IT Policies, participating in different security projects to implement cybersecurity controls to meet security requirements and business needs, and managing IT risks and mitigations to reduce risk exposure.

He/she will work with service providers and various IT teams to deliver cybersecurity operations services, and have a hand-on administration on certain IT and security infrastructure.

What You'll Do

• IT Policies – Regular review IT Policies to keep them relevant and up to date.
• IT Security Operations and Management – Work with IT teams and service providers to handle security incidents. Follow up cybersecurity projects to ensure a quality delivery. Configure and operate different cybersecurity solutions.
• IT Security Governance, Risk Management and Compliance – Work with HK IT teams, Group IT or other HAECO entities to lay down security governance. Manage cyber and IT security risks. Ensure compliance to various security policies and procedures.

What You'll Need

• 5-8 years of experience in Cybersecurity or IT security project deliverables
• Bachelor’s or master’s degree in computer science, computer engineering, or a related field or discipline
• Working experience in information security technologies such as endpoint security, SIEM, DLP, WAF, IGA, SASE, ZTNA, NAC, email security and host & network firewalls
• Working experience with SOC and handling security alerts
• Infrastructure administration experience, including server, network, firewall and cloud computing
• Working knowledge on cloud infrastructure (especially Azure) and related cloud security products, e.g. CSPM, DSPM, PIM, NSG, Firewall, Front Door WAF
• Basic knowledge of application security and testing tools (e.g. DataDog, Trivy)
• Holder of IT Security certifications such as ISC2 CISSP CCSP CISM / CompTIA SecAI+ CySA+ / IAPP AIGP / ISACA CRISC CISM / GIAC GSEC GCSA / Azure security certifications (e.g. AZ-500) is an advantage
• Sound understanding of technological concepts, trends, capabilities and limitations
• Knowledge and experience in governance of AI adoptions, including LLMs and AI agents with Agent 365 and Power Platform, or equivalent exposure to AI risk frameworks (e.g. OWASP Top 10 for LLMs).
• Proven ability and skills to coordinate working IT teams / IT system owners on security policy governance and compliance.
• Working knowledge on local & global data security and privacy laws, e.g. PDPO, GDPR, CCPA, PIPL, CSL, DSL, MLPS2, and the experience to conduct a DPIA.
• Experience on ISO27001 (ISMS) certification and concepts on ISO 42001 (AIMS)
• Solid experience on IT product evaluation and vendor selection
• Experience in managing IT or security projects and vendor management

Successful candidates shall demonstrate their competency in security first line (e.g. security operations, monitoring, controls), second line (e.g. security governance, compliance, risk management), or both.

HAECO Group is an equal opportunity employer. At HAECO, we are committed to creating an inclusive and supportive working environment for all our people regardless of their age, gender, gender identity, sexual orientation, relationship, family status, disability, race, ethnicity, nationality, religious or political beliefs. We believe in creating an environment where people feel comfortable at work and are able to realise their full potential.

Build your career with us and be part of something bigger at HAECO!

Reference ID: 1153

Candidates not contacted 4-6 weeks after submission of applications and/or interviews may consider their application unsuccessful.

All information provided by candidates will be treated in strict confidence and will be used for employment purpose only.