Systems Analyst (Risk & Cybersecurity)

Airport Authority Hong Kong; Hong Kong; On-site; HKD 420,000 - 680,000; Full time

Job summary

Airport Authority Hong Kong is seeking a cybersecurity professional to assist in managing and implementing security projects, including design, procurement, and integration across systems.

You will collaborate with vendors and ITD teams, monitor security posture, and provide first-line support for incidents, with responsibility for documentation, risk assessments, and policy enforcement.

Qualifications

• Degree holder in Information Technology, Computer Science or related disciplines with at least 3 years of IT work experience, including 1 year in IT Security/Cybersecurity.
• Solid knowledge in information security management across private/public/hybrid cloud, virtualization, databases, web and mobile apps.
• Experience in security operations, threat hunting and incident response in critical infrastructure or large-scale organizations is advantageous.
• Hands-on experience with cybersecurity solutions such as NDR, DLP, EDR/AV, SASE, SIEM, SOAR, ASM.
• Strong Windows and Linux OS knowledge across cloud, virtualization, databases, web and mobile apps.
• Proactive problem-solving, ability to work under pressure; fluent English and Chinese; Putonghua is a plus.
• Professional certifications in Information Security/Risk Management (e.g., CC, CISSP, CISA, CISM, CEH, CRISC) preferred.

Responsibilities

• Assist the Manager / Assistant Manager to manage and implement cybersecurity projects including solution design, procurement process, documentation preparation, contractor management, solution delivery, stakeholder engagement.
• Manage the integration of a new system with other existing security systems to maximize the capability of total security solutions.
• Work with vendors and ITD teams to integrate the security systems with other IT systems.
• Implement control measures for maintaining security posture for maximizing protection for endpoints and network.
• Support the operations of cybersecurity systems and infrastructure of the Authority.
• Act as first-line support on security operation and incident response, including information gathering, log analysis, stakeholder engagement.
• Collaborate with IT operations, infrastructure and systems technical leads, and security and technology vendors to respond in an accurate and swift manner when facing cyberattacks
• Maintain up-to-date policies, standards and guidelines on cybersecurity of the Authority and enforce the compliance of the security requirements and alignment of IT & security policies.
• Identify security risks and exposures by participating in security reviews, evaluations and risk assessments.
• Investigate any cyberattacks or violations of security incidents and assist on handling security related

Skills

Cybersecurity

Security operations

Incident response

Threat hunting

Cloud security

Windows & Linux

English & Chinese

Education

Degree in IT/CS

Tools

NDR

DLP

EDR/AV

SASE

SIEM

SOAR

ASM

Job description

Where Your Career Takes Flight

Airport Authority Hong Kong (AA) manages and operates Hong Kong International Airport, one of the finest and busiest airports in the world.

We now invite high calibre talent with creativity and passion to join us for a rewarding and meaningful career journey.

We care for our people and provide colleagues with a fair, open and supportive workplace.

By joining us, you will contribute to the continued success and growth of a key infrastructure and economic engine of Hong Kong, gaining invaluable experiences in a unique environment and enjoying boundless opportunities to unleash your full potential.

Together we will share the pride of our leadership status in the global aviation industry and our commitment to sustainability.

This is a fixed-term contract position of minimum 2 years with possibility for renewal subject to organization need and individual performance.

Job Description

• Assist the Manager / Assistant Manager to manage and implement of the cybersecurity projects including solution design, procurement process, documentation preparation, contractor management, solution delivery, stakeholder engagement etc.

• Manage the integration of a new system with other existing security systems to maximize the capability of total security solutions.

• Work with vendors and ITD teams to integrate the security systems with other IT systems.

• Implement control measures for maintaining security posture for maximizing protection for endpoints and network.

• Support the operations of cybersecurity systems and infrastructure of the Authority.

• Act as first-line support on security operation and incident response, including information gathering, log analysis, stakeholder engagement.

• Collaborate with IT operations, infrastructure and systems technical leads, and security and technology vendors to respond in an accurate and swift manner when facing cyberattacks

• Maintain up-to-date policies, standards and guidelines on cybersecurity of the Authority and enforce the compliance of the security requirements and alignment of IT & security policies.

• Identify security risks and exposures by participating in security reviews, evaluations and risk assessments.

• Investigate any cyberattacks or violations of security incidents and assist on handling security related

Requirements

• Degree holder in Information Technology, Computer Science or related disciplines with at least 3 years of IT work experience, of which at least 1 year in IT Security/Cybersecurity

• Solid experience and knowledge in information security management involving private/public/hybrid cloud, virtualization, databases, web, mobile applications and systems.

• Proven experience in security operations, threat hunting and incident response in critical infrastructure companies or large-scale organizations is an advantage.

• Hands-on working experience in managing cybersecurity solutions, e.g. NDR, DLP, EDR/AV, SASE, SIEM, SOAR, ASM, etc.

• In-depth knowledge of Windows and Linux operating systems, private/public/hybrid cloud, virtualization, database, web and mobile applications.

• Strong knowledge in cybersecurity technologies, threat intelligence, network, platform and application security.

• Professional certifications in Information Security, Risk Management (i.e. CC, CISSP, CISA, CISM, CEH, CRISC etc.) is preferred

• Proactive, problem-solving mindset with the ability to work under pressure

• Excellent command of spoken and written English and Chinese with knowledge of Putonghua is an advantage