Senior IT Security Analyst (Cybersecurity, Compliance) (Logistics)

Classy Wheeler Limited; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

A leading logistics company in Hong Kong is seeking a Senior IT Security Analyst to enhance their cybersecurity measures. The ideal candidate will support the development and implementation of security policies, manage incident responses, and conduct risk assessments. Candidates should possess a Bachelor's degree in Computer Science or related fields, have at least five years of IT experience, and hold certifications such as CISSP or CISM. Proficiency in Cantonese is also required for effective communication within the team.

Qualifications

• Minimum five to seven years of experience in IT, with at least three in cybersecurity roles.
• Professional certifications such as CISSP, CISM, CISA, or equivalent are required.
• Proficiency in Cantonese is required.

Responsibilities

• Support the development and implementation of cybersecurity policies.
• Coordinate incident response activities, investigate security breaches.
• Conduct regular risk assessments and vulnerability scans.

Skills

Network security

Application security

Cloud security

Risk assessment

Analytical skills

Communication skills

Education

Bachelor's degree in Computer Science, Information Security, or a related field

Tools

Firewalls

SIEM

Endpoint protection

Job description

Senior IT Security Analyst (Cybersecurity, Compliance) (Logistics)

Client Description

Company Description: A leading company in the logistics industry, providing container terminal services and committed to maintaining high operational and security standards in critical infrastructure.
Location: Kwai Chung
Nature: Permanent

Job Description

• Support the development and implementation of cybersecurity policies and procedures to align with organizational goals and regulatory requirements.
• Coordinate incident response activities, including the investigation and thorough documentation of security breaches.
• Implement and maintain security controls and solutions in accordance with ISO 27001 standards and other relevant security frameworks.
• Conduct regular risk assessments and vulnerability scans, recommending and tracking appropriate mitigation strategies.
• Manage and monitor security tools such as firewalls, SIEM, endpoint protection, and other threat detection platforms.
• Collaborate with IT, compliance, and operational teams to ensure consistent adherence to security policies and best practices.
• Assist in internal and external IT audits and support engagements with third-party audit firms.
• Deliver cybersecurity awareness and training programs for staff and contractors.
• Prepare precise technical reports and risk analysis documentation for management review.

Job Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• Minimum of five to seven years of experience in IT, with at least three years in dedicated cybersecurity roles.
• Professional certifications such as CISSP, CISM, CISA, or equivalent are required, with CRISC being a plus.
• Strong knowledge of network security, application security, cloud security, and endpoint protection.
• Proven experience in conducting risk assessments and effectively managing security incidents.
• Familiarity with security frameworks and standards, including ISO 27001, NIST, and COBIT.
• Experience with major cloud platforms (AWS, Azure, GCP) is highly desirable.
• Excellent analytical, problem-solving, and communication skills with the ability to work independently and manage multiple priorities.
• Proficiency in Cantonese is required, as the internal IT team primarily communicates in Cantonese.