IT Security Systems Analyst | ISO 27001/27701 Focus

PERSOL; Hong Kong; On-site; HKD 550,000 - 750,000; Full time

Job summary

A HKSAR Government Department is seeking an experienced IT professional to assist project management, coordinate contractors, and ensure the adoption of ISO/IEC standards across systems. You will support IT audits and privacy-related assessments, collaborate with certification bodies, and help maintain daily operations in a regulated environment.

The role requires solid experience in IT operations, security assessments, and governance frameworks, with advantageous certifications such as

Qualifications

• Higher Diploma or above in computer subjects or related disciplines.
• At least 4 years of IT experience.
• Experience in Information System Policy, Standard and Framework.
• Experience in IT operation.
• Solid IT audits and cyber security assessment experience.
• Experience with accredited certification bodies.
• Certifications such as CISM, CISA, CISSP, ITIL, ISO27001 LA are advantageous.

Responsibilities

• Assist project management and coordinate parties to implement and maintain ISO/IEC 27001:2022 and ISO/IEC 27701:2019 compliant systems.
• Provide audit support for obtaining and maintaining ISO/IEC certifications with contractors.
• Assist in planning, designing, coordinating and reviewing processes and controls to ensure daily operations follow ISO/IEC standards.
• Carry out activities necessary to support services and operations as assigned by supervisors.
• Perform other duties as directed by supervisors.

Skills

IT audits

Cyber security

PIA

ISO 27001

ISO 27701

IT operations

Policy & frameworks

Audit coordination

Certification bodies

Information security certs

Education

Higher Diploma or above in computer subjects

Tools

ITIL

ISO27001 LA

Job description

A HKSAR Government Department is seeking an experienced IT professional to assist project management, coordinate contractors, and ensure the adoption of ISO/IEC standards across systems. You will support IT audits and privacy-related assessments, collaborate with certification bodies, and help maintain daily operations in a regulated environment.

The role requires solid experience in IT operations, security assessments, and governance frameworks, with advantageous certifications such as