Senior Consultant - Security & Privacy

Protiviti Hong Kong; Hong Kong; Sur place; HKD 420 000 - 620 000; Plein temps

Résumé du poste

Protiviti Hong Kong is seeking a cybersecurity professional to participate in IT / Cybersecurity Audit and Consulting projects, including security and privacy assessments and PCI-related work. You will test IT controls, prepare client documents, and translate technical risks into business actions.

The role requires a 2–5 year track record in cybersecurity, strong English, and Mandarin/Cantonese skills, with a preference for consulting experience.

Qualifications

• Bachelor’s degree in computer science, Information System or related discipline.
• Professional certifications such as CISA, CISSP, CISM, ISO 27001 Lead Auditor, or ITIL are preferred.
• 2–5 years of relevant cybersecurity experience; consulting firm experience preferred.
• Experience with PCI DSS and/or SWIFT assessments is an advantage.
• Knowledge of AI governance is an advantage.
• Good command of English; Mandarin and Cantonese preferred.

Responsabilités

• Participate in IT / Cybersecurity Audit and Consulting projects (security assessment/design, privacy assessment, PCI related projects).
• Perform testing of IT controls and IT processes.
• Prepare documents, client proposals and reports.
• Analyze client issues and provide IT advice to clients.
• Create risk treatment and mitigation solutions for identified security issues.
• Convert vulnerabilities into business risks and advise corrective actions.
• Share knowledge and offer technical support to teammates.
• Liaise with clients throughout projects.

Connaissances

Cybersecurity

IT controls testing

Risk analysis

Stakeholder mgmt

English proficient

Mandarin/Cantonese

Problem solving

Knowledge sharing

Formation

Bachelor's degree (CS/IS)

Outils

PCI DSS

SWIFT assessments

ISO 27001

Description du poste

- Participate in IT / Cybersecurity Audit and Consulting projects (including security assessment and design, privacy assessment, PCI related projects, etc.)

- Perform testing of IT controls and IT processes

- Prepare documents, client proposals and reports

- Analyze client issues and provide IT advice to the clients

- Create risk treatment and mitigation solutions for identified security issues.

- Convert technical vulnerabilities into business risks and advise corrective actions for customers and stakeholders.

- Share knowledge and offer technical support to teammates.

- Serve as SME with in-depth expertise in relevant technologies and services.

- Liaise with clients throughout the projects

Requirements:

- Bachelor’s degree in computer science, Information System or related discipline (Must have)

- Professional certifications, i.e. CISA, CISSP, CISM, ISO 27001 leader auditor, or ITIL, are preferred

- 2 -5 years of relevant cybersecurity working experience. Work experience in consulting firm preferred

- Experience with PCI DSS and/or SWIFT assessments is an advantage.

- Knowledge of and experience in AI governance is an advantage.

- Good command of English; Mandarin and Cantonese preferred

- Excellent analytical and problem-solving skills

- Good project and people management skills