OT/ICS Security Architect & Risk Assessor

ATAL Data Centre Infrastructure Limited; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

ATAL Data Centre Infrastructure Limited in Hong Kong seeks a Security Engineer focused on OT/ICS security and architecture. You will lead risk assessments, audits, and architectural hardening for wastewater control systems, bridging IT and OT to protect critical infrastructure against cyber threats.

You will implement DMZs, industrial firewalls, and data diodes, ensure ISO 27001 alignment, and coordinate third-party security testing and regulatory compliance with HK OG CIO guidelines.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Computer/Electronic Engineering, Automation/Control Engineering, or related technical discipline.
• Minimum 3–5 years in information security with track record in ISO 27001 ISMS implementation/auditing and OT/ICS/SCADA security.
• Deep understanding of ISO 27001 framework and mapping IT controls to OT environments.
• Familiarity with Purdue Model, DMZ setup, and industrial network segmentation.
• Experience preparing for ISO 27001 certification audits and writing SRAA reports.

Responsibilities

• SRAA & Compliance: Conduct comprehensive Security Risk Assessment and Audit (SRAA) on hardware (PLCs, HMIs, switches) and software (SCADA platforms, databases) against ISO 27001, IEC 62443.
• Network Segmentation (DMZ): Design and implement DMZs, industrial firewalls, and data diodes to isolate Wastewater Production Control Zone from other zones.
• Endpoint & Host Security: Deploy antivirus, IDS/IPS, patch management, and vulnerability hardening on servers, NAS, and VMs.
• OGCIO Compliance Management: Ensure adherence to HK OGCIO guidelines including S17, G3, G54, and G51.
• Security Auditing & Penetration Testing: Liaise with third-party firms for audits and pre-handover testing; remediate findings.
• Data Integrity & Logging: Establish audit trails, access controls, and logging to protect CIA of time-series and ML databases.

Skills

OT/ICS Security

Security Engineering

Governance & Compliance

ISO 27001

Threat & Vulnerability Management

Education

Bachelor's degree in Information Security or related

Tools

DMZ design

Job description

ATAL Data Centre Infrastructure Limited in Hong Kong seeks a Security Engineer focused on OT/ICS security and architecture. You will lead risk assessments, audits, and architectural hardening for wastewater control systems, bridging IT and OT to protect critical infrastructure against cyber threats.

You will implement DMZs, industrial firewalls, and data diodes, ensure ISO 27001 alignment, and coordinate third-party security testing and regulatory compliance with HK OG CIO guidelines.