[LPS] Cybersecurity Consultant

LPS; Hong Kong; Sur place; HKD 600 000 - 900 000; Plein temps

Résumé du poste

Lenovo in Hong Kong is seeking an IT risk and security professional to join our cybersecurity team. You will conduct risk assessments, run penetration tests, and help shape our security operations and control framework to protect IT systems and data across the enterprise.

This role requires strong knowledge of information security, BC/DR, and project management, with relevant certifications being a plus. Join a global tech leader delivering Smarter Technology for All in a dynamic, collaborative

Qualifications

• Strong knowledge in information security and security operations.
• Experience with risk assessments and control frameworks.
• Certificates in cybersecurity are a plus.

Responsabilités

• Conduct comprehensive risk and control assessments to identify, evaluate, monitor, and mitigate risks across IT systems, applications, and network operations.
• Conduct penetration testing to identify vulnerabilities and assess the effectiveness of security controls; implement remediation plans.
• Support security teams in defining, assessing, and managing security operations through policies, procedures, and control frameworks.
• Evaluate IT control processes to ensure the control environment is effectively designed and functioning.
• Facilitate audit and security control reviews with internal teams and external parties, prioritizing and mitigating risks.
• Enhance security measures such as threat detection and mitigation based on current threats.
• Promote communication and collaboration between internal teams and external parties on risk and cybersecurity matters.

Connaissances

Information Security

Business Continuity

Project Management

Application Security

Industry best practices

Formation

High Diploma in Cybersecurity, Computer Science, Information Technology, Information System or related disciplines

Description du poste

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

To find out more visit www.lenovo.com and read about the latest news via our StoryHub.

Your Role

• Conduct comprehensive risk and control assessments to identify, evaluate, monitor, and mitigate risks across IT systems, applications, and network operations.
• Conduct penetration testing to identify vulnerabilities and assess the effectiveness of security controls. Implement remediation plans based on penetration test findings to strengthen the security posture.
• Support security teams in defining, assessing, and managing security operations through appropriate policies, procedures, and control frameworks.
• Proactively evaluate IT control processes and activities to ensure the control environment is effectively designed and functioning.
• Facilitate audit and security control reviews with internal teams and external parties, prioritizing and mitigating risks to acceptable levels.
• Enhance security measures such as threat detection, attack penetration, and mitigation based on current and emerging threats.
• Promote communication and collaboration between internal teams and external parties on risk and cybersecurity matters.

#LPS

Job Requirements

• High Diploma in Cybersecurity, Computer Science, Information Technology, Information System or related disciplines.
• Sound knowledge in Information Security, Business Continuity, Project Management, Application Security and industry best practices
• Holder of one or more of the following certifications is a plus: CISSP, CISA, CISM, CISP, OSCP, CEH, CRTP, and CRT.

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.