Senior Information Security Analyst

Hkhs; Hong Kong; On-site; HKD 600,000 - 900,000; Full time

Job summary

Hong Kong Housing Society is seeking an experienced Information Security Leader to drive complex security projects and coordinate external vendors to deliver on time and within budget.

The role manages information security systems to ensure compliance with IT security policies, ISO/IEC 27001 and regulatory requirements, conducts risk assessments, analyzes emerging threats, and leads incident response initiatives. Fluency in English and Chinese is preferred.

Qualifications

• Degree in Computer Science or related discipline; professional information security qualification preferred.
• 8 years IT experience; at least 5 years in information security in a sizable organisation.
• Solid foundation in enterprise information security domains: firewalls, WAF, DLP, cloud and application security, EDR/NDR, SIEM/SOAR, DevSecOps.
• Experience implementing IT/security frameworks (e.g. ITIL, ISO/IEC 20000, 27001, NIST CSF).
• Hold at least one professional information security certification (CISSP, CISM, CEH, CRISC, CCSP).
• Data analytics / programming skills (Python, PowerShell) advantageous.
• Ability to define functional/technical specs for external consultants or vendors.

Responsibilities

• Lead information security project implementations and drive external vendors to complete projects on schedule and within budget.
• Manage information security systems to ensure compliance with policies, standards, ISO/IEC 27001, and regulatory requirements.
• Perform risk assessments on IT systems or projects to identify weaknesses and non-compliance.
• Analyze emerging cyber threats across infrastructure, cloud, AI, and supply chains; recommend controls.
• Responsible for handling information security incidents and developing preventive measures.
• Leverage AI and automation to enhance security investigations and operational efficiency.
• Assist management to develop or update IT security standards and procedures.
• Collaborate with IT teams and business users to enable cybersecurity solutions.
• Coach and provide guidance to less experienced peers.
• Perform ad-hoc tasks as required.

Skills

InfoSec management

Vendor management

Risk assessment

Threat analysis

Incident handling

AI in security

Standards & policy

Communication skills

English & Chinese

DevSecOps

Education

Bachelors in CS

IT security certification

5+ years information security

Tools

Firewalls

WAF

DLP

EDR/NDR

SIEM/SOAR

Cloud security

DevSecOps tooling

Job description

• Lead information security project implementation and drive external IT vendors, system integrators, or consultants to complete projects on schedule and within budget.


• Manage information security systems and services to ensure compliance with the organisation's IT security policies, standards, ISO/IEC 20000/27001, and regulatory requirements.


• Perform risk assessment on IT systems or projects to identify potential security weaknesses and non-compliance issues.


• Analyze emerging cyber threats across infrastructure, applications, cloud, AI, and supply chains, and recommend appropriate security solutions and controls to mitigate the identified risks.


• Responsible for handling information security incidents and developing preventive measures.


• Leverage AI and automation technologies to enhance security investigation capabilities and improve operational efficiency.


• Assist management to develop or update IT security standards and procedures.


• Collaborate closely with IT teams and business users to ensure successful enablement of cybersecurity solutions.


• Coach and provide technical guidance to less experienced peers.


• Perform other ad-hoc tasks when required.

The Person

• Degree holder in Computer Science or related discipline with relevant qualification in information security would be preferred.


• 8 years' work experience in IT, and at least 5 years in information security in a sizable organisation.


• Solid foundation in enterprise information security domains, such as firewalls, WAF, DLP, cloud and application security, EDR/NDR, SIEM/SOAR, and DevSecOps, etc..


• Experience in implementing IT/security framework (e.g. ITIL, ISO/IEC 20000, 27001, NIST CSF, or Digital Policy Office Practice Guide).


• Hold at least one professional information security certification, such as CISSP, CISM, CEH, CRISC, or CCSP.


• Data analytics and/or programming skills, such as Python and PowerShell, for process automation will be an advantage.


• Capable of defining functional and/or technical specifications for external IT consultants, vendors, or service providers to deliver solutions.


• A self-motivator who has a \"can-do\" attitude and innovative mindset.


• Proven track record in managing large-scale security projects with the ability to deliver on time and within budget.


• Well organised and able to prioritise and complete tasks efficiently.


• Strong interpersonal, time management, and communication skills, with proficiency in both English and Chinese.


• Candidates with less work experiences may be considered for the position of Information Security Analyst.

Attractive remuneration package will be offered to suitable candidates.

You are welcome to visit our website http://www.hkhs.com to learn more about us.

Applicants not invited for interview within 8 weeks may consider their applications unsuccessful.

Personal data provided by job applicants will be used strictly in accordance with the Housing Society's personal data policies which is available in our website and obtainable upon request. Please refer to the Policy Statement on Employment Related Data under Personal Data (Privacy) Ordinance in our website.