System Analyst (IT Security)

PERSOL; Hong Kong; On-site; HKD 550,000 - 750,000; Full time

Job summary

A HKSAR Government Department is seeking an experienced IT professional to assist project management, coordinate contractors, and ensure the adoption of ISO/IEC standards across systems. You will support IT audits and privacy-related assessments, collaborate with certification bodies, and help maintain daily operations in a regulated environment.

The role requires solid experience in IT operations, security assessments, and governance frameworks, with advantageous certifications such as

Qualifications

• Higher Diploma or above in computer subjects or related disciplines.
• At least 4 years of IT experience.
• Experience in Information System Policy, Standard and Framework.
• Experience in IT operation.
• Solid IT audits and cyber security assessment experience.
• Experience with accredited certification bodies.
• Certifications such as CISM, CISA, CISSP, ITIL, ISO27001 LA are advantageous.

Responsibilities

• Assist project management and coordinate parties to implement and maintain ISO/IEC 27001:2022 and ISO/IEC 27701:2019 compliant systems.
• Provide audit support for obtaining and maintaining ISO/IEC certifications with contractors.
• Assist in planning, designing, coordinating and reviewing processes and controls to ensure daily operations follow ISO/IEC standards.
• Carry out activities necessary to support services and operations as assigned by supervisors.
• Perform other duties as directed by supervisors.

Skills

IT audits

Cyber security

PIA

ISO 27001

ISO 27701

IT operations

Policy & frameworks

Audit coordination

Certification bodies

Information security certs

Education

Higher Diploma or above in computer subjects

Tools

ITIL

ISO27001 LA

Job description

A HKSAR Government Department

Responsibilities:

• To assist project management and coordinate various parties, such as contractors, operation and support teams implement and maintain the management systems according to standards such as ISO/IEC 27001:2022 and ISO/IEC 27701:2019
• To work with the contractors, operation and support teams to provide audit support for obtaining and maintaining system certifications of the relevant ISO/IEC standards
• To assist in planning, designing, coordinating, and reviewing the adoption of processes and controls in consultation with the contractors, the operation and support teams to ensure the daily operations follow the relevant ISO/IEC standards
• To carry out any other activities which are necessary for supporting the services and operations of the system as assigned by the supervisors
• Any other duties assigned by the supervisors

Requirements:

• Higher Diploma holder or above in computer subjects or related disciplines
• At least 4 years of relevant experience in IT
• At least 1 year experience in one or more of the following aspects:
• Information System Policy, Standard and Framework
• IT operation
• Solid working experience in IT audits, cyber security assessments such as Security Risk Assessment and Audit, Privacy Impact Assessment and Privacy Compliance Audit
• Solid experience in working with accredited certification body
• Candidates with valid certification in information security (e.g. CISM, CISA, CISSP, ITIL, ISO27001 LA etc.) will be advantageous